Lucene search
+L

50 matches found

OSV
OSV
added 2023/03/17 9:30 a.m.51 views

GHSA-J72F-4HGP-3MWC jeecg-boot SQL Injection vulnerability

A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulation of the argument apiSelectId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

9.8CVSS6.9AI score0.35825EPSS
SaveExploits3References5
Github Security Blog
Github Security Blog
added 2023/03/17 9:30 a.m.46 views

jeecg-boot SQL Injection vulnerability

A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulation of the argument apiSelectId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

9.8CVSS9.6AI score0.35825EPSS
SaveExploits3References5Affected Software1
OSV
OSV
added 2023/03/17 6:56 a.m.25 views

CVE-2023-1454 jeecg-boot qurestSql sql injection

A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulation of the argument apiSelectId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

6.3CVSS6.4AI score
SaveExploits0References5
CNNVD
CNNVD
added 2023/03/17 12:00 a.m.13 views

jeecg SQL注入漏洞

jeecg is a software application. An intelligent development platform based on a code generator. A SQL injection vulnerability exists in jeecg-boot version 3.5.0, which stems from a security issue in the file jmreport/qurestSql, which leads to SQL injection via the parameter apiSelectId...

9.8CVSS7.1AI score0.35825EPSS
SaveExploits3References4
Positive Technologies
Positive Technologies
added 2023/03/17 12:00 a.m.10 views

PT-2023-16995

Name of the Vulnerable Software and Affected Versions jeecg-boot version 3.5.0 Description A critical vulnerability has been found in jeecg-boot, affecting an unknown part of the file jmreport/qurestSql. The manipulation of the apiSelectId argument leads to sql injection. It is possible to initia...

9.8CVSS6.6AI score0.35825EPSS
SaveExploits3References14
OSV
OSV
added 2022/03/11 12:01 a.m.61 views

GHSA-Q448-6C3M-CXMJ Cross-site Scripting in jeecg-boot

jeecg-boot is a code generator. A Cross Site Scripting XSS vulnerabilitiy exists in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event...

6.1CVSS5.9AI score0.00907EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2022/03/10 9:15 p.m.5 views

CVE-2021-44585

A Cross Site Scripting XSS vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event...

6.1CVSS6.3AI score0.00907EPSS
SaveExploits1References2
NVD
NVD
added 2022/03/10 9:15 p.m.26 views

CVE-2021-44585

A Cross Site Scripting XSS vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event...

6.1CVSS0.00907EPSS
SaveExploits1References1
OSV
OSV
added 2022/03/10 9:15 p.m.22 views

CVE-2021-44585

A Cross Site Scripting XSS vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event...

6.1CVSS6AI score
SaveExploits0References1
CNNVD
CNNVD
added 2022/03/10 12:00 a.m.13 views

Jeecg-Boot 跨站脚本漏洞

Jeecg-Boot is a low-code platform based on the code generator from the JeecgBoot community. Jeecg-Boot 3.0 has a security vulnerability that stems from a cross-site script in /jeecg-boot/jmreport/view that causes a mouse hover event. No details of the vulnerability are currently available...

6.1CVSS5.5AI score0.00907EPSS
SaveExploits1References2
Rows per page
Query Builder