Lucene search
+L

15 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:43 p.m.•24 views

CVE-2026-8114

A vulnerability was identified in JeecgBoot up to 3.9.1. Affected by this issue is some unknown functionality of the file /sys/dict/loadTreeData of the component JSON Object Handler. The manipulation of the argument condition leads to sql injection. The attack can be initiated remotely. The explo...

6.5CVSS6.3AI score0.00316EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/05/08 12:31 a.m.•40 views

EUVD-2026-28468

A vulnerability was identified in JeecgBoot up to 3.9.1. Affected by this issue is some unknown functionality of the file /sys/dict/loadTreeData of the component JSON Object Handler. The manipulation of the argument condition leads to sql injection. The attack can be initiated remotely. The explo...

6.5CVSS6.3AI score0.00316EPSS
SaveExploits0References6
CVE
CVE
•added 2026/05/07 10:00 p.m.•58 views

CVE-2026-8114

CVE-2026-8114 affects JeecgBoot up to 3.9.1, targeting the file path /sys/dict/loadTreeData in the JSON Object Handler. The vulnerability stems from manipulation of an input argument in that function, enabling SQL injection. The issue is remote in nature, with a publicly available exploit noted i...

6.5CVSS6.3AI score0.00316EPSS
SaveExploits0References5
OSV
OSV
•added 2026/05/07 10:00 p.m.•17 views

CVE-2026-8114 JeecgBoot JSON Object loadTreeData sql injection

A vulnerability was identified in JeecgBoot up to 3.9.1. Affected by this issue is some unknown functionality of the file /sys/dict/loadTreeData of the component JSON Object Handler. The manipulation of the argument condition leads to sql injection. The attack can be initiated remotely. The explo...

5.3CVSS6.3AI score
SaveExploits0References7
attackerkb
attackerkb
•added 2026/05/07 10:00 p.m.•11 views

CVE-2026-8114

A vulnerability was identified in JeecgBoot up to 3.9.1. Affected by this issue is some unknown functionality of the file /sys/dict/loadTreeData of the component JSON Object Handler. The manipulation of the argument condition leads to sql injection. The attack can be initiated remotely. The explo...

6.5CVSS6.3AI score0.00316EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/05/07 12:00 a.m.•35 views

PT-2026-38598

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.2 Description An issue exists in the JSON Object Handler component where the manipulation of the condition argument in the '/sys/dict/loadTreeData' endpoint allows for remote SQL injection. SQL injection is a...

6.5CVSS6.6AI score0.00316EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/07 12:00 a.m.•8 views

CVE-2026-8114: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in JeecgBoot up to 3.9.1. Affected by this issue is some unknown functionality of the file /sys/dict/loadTreeData of the component JSON Object Handler. The manipulation of the argument condition leads to sql injection. The attack can be initiated remotely. The explo...

6.5CVSS6.3AI score0.00316EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/07/28 12:00 a.m.•15 views

PT-2023-26721 · Unknown · Jeecg-Boot

Name of the Vulnerable Software and Affected Versions: jeecg-boot version 3.5.1 Description: The issue is a SQL injection vulnerability. It occurs via the title parameter at the "/sys/dict/loadTreeData" API endpoint. Recommendations: For jeecg-boot version 3.5.1, consider restricting access to th...

9.8CVSS9.5AI score0.73398EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/28 12:00 a.m.•4 views

CVE-2023-38992: Improper Neutralization of Special Elements used in an SQL Command

jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData...

9.8CVSS8.1AI score0.73398EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/07/28 12:00 a.m.•32 views

CVE-2023-38992

jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData...

8.2AI score0.73398EPSS
SaveExploits1References1
Mend
Mend
•added 2023/07/28 12:00 a.m.•7 views

CVE-2023-38992

jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData...

9.8CVSS0.73398EPSS
SaveExploits1References5
OSV
OSV
•added 2023/07/28 12:00 a.m.•42 views

CVE-2023-38992

jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData...

8.5AI score
SaveExploits0References3
CNNVD
CNNVD
•added 2021/08/06 12:00 a.m.•20 views

jeecg SQL注入漏洞

Jeecg-Boot is a code generator-based intelligent development platform. jeecg-boot CMS version 2.3 of /jeecg boot/sys/dict/loadtreedata is vulnerable to SQL injection, which can be exploited by attackers to access sensitive database information...

7.5CVSS5.8AI score0.01554EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/06 12:00 a.m.•6 views

CVE-2020-28087: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information...

7.5CVSS5.8AI score0.01554EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/08/06 12:00 a.m.•6 views

PT-2021-11443

Name of the Vulnerable Software and Affected Versions: jeecg-boot CMS version 2.3 Description: A SQL injection issue in the "/jeecg boot/sys/dict/loadtreedata" endpoint of jeecg-boot CMS allows attackers to access sensitive database information. Recommendations: For jeecg-boot CMS version 2.3,...

7.5CVSS5.7AI score0.01554EPSS
SaveExploits1References5
Rows per page
Query Builder