CVE-2023-1454-Jeecg-Boot-qurestSql-SQLvuln

CVE-2023-1454 Jeecg-Boot-qurestSql-SQLvuln jmreport/qurestSql 미인증 SQL 주입 대량 스캔 poc Jeecg-Boot는 Spring Boot와 Jeecg-Boot-Plus 기반의 빠른 개발 플랫폼으로, 최신 jeecg-boot 3.5.0에서 여러 SQL 주입 취약점이 발견되었습니다. Usage root@kitploit: usage: CVE-2023-1454.py -h -u URL -f FILE -t THREAD -T TIMEOUT -o OUTPUT -p PROXY optiona...

CVE-2023-1454

CVE-2023-1454 jmreport/qurestSql 미인증 SQL 인젝션 대량 스캔 poc Jeecg-Boot는 Spring Boot와 Jeecg-Boot-Plus 기반의 빠른 개발 플랫폼으로, 최신 jeecg-boot 3.5.0에서 여러 SQL 인젝션 취약점이 발견되었습니다. 설명 원본 도구 주소 원본 도구는 오탐률이 높아 판정 조건을 수정하고 겸사겸사 코드도 최적화했습니다. 도구 사용법 python3 CVE-2023-1454-scan.py -u http://127.0.0.1:1111 단일 URL 테스트 python3...

CVE-2023-1454-EXP

JeecgBoot SQL CVE-2023-1454 exp 1. Dettagli della vulnerabilità La versione 3.5.0 di jeecg-boot presenta una vulnerabilità di SQL injection. La vulnerabilità deriva da un problema di sicurezza nel file jmreport/qurestSql, attraverso il parametro apiSelectId che causa SQL injection. 2. Utilizzo...

CVE-2024-43028

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

EUVD-2024-55520

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

CVE-2024-43028

CVE-2024-43028 is a reported command-injection vulnerability in the Jeecg Boot platform, affecting the /jmreport/show component from v3.0.0 to v3.5.3. The issue allows an attacker to execute arbitrary code via a crafted HTTP request, with network access (no authentication) required. The CVSS v3.1...

CVE-2024-43028

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

CVE-2024-43028

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

JeecgBoot 安全漏洞

JeecgBoot is a Java low-code platform developed by Jeecg Corporation, designed for enterprise web applications. Versions of JeecgBoot from v3.0.0 to v3.5.3 have security vulnerabilities. These vulnerabilities stem from command injection in the component jmreport/show, which could allow attackers ...

PT-2026-29548

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request...

CVE-2023-1454

A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulation of the argument apiSelectId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

SQL Injection

jeecg-boot is vulnerable to SQL Injection. The vulnerability is caused due to improper input validation in the jmreport/qurestSql component. This could allow an attacker to inject malicious input leading to SQL Injection...

CVE-2023-41544

SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component...

Jeecg Boot SQL injection vulnerability

SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the jmreport/qurestSql component...

GHSA-5V9R-788C-WC8P Jeecg Boot SQL injection vulnerability

SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the jmreport/qurestSql component...

CVE-2023-41542

SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the jmreport/qurestSql component...

CVE-2023-41542

SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the jmreport/qurestSql component...

Sql injection

SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the jmreport/qurestSql component...

jeecg security breach

jeecg is a software application. An intelligent development platform based on a code generator. A security vulnerability exists in jeecg-boot 3.5.3 and earlier versions, which stems from a SQL injection vulnerability in the jmreport/qurestSql component...

CVE-2023-41542

SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the jmreport/qurestSql component...