CVE-2023-40989

SQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted request to the report/jeecgboot/jmreport/queryFieldBySql component...

CVE-2023-40989: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted request to the report/jeecgboot/jmreport/queryFieldBySql component...

PT-2023-27734

Name of the Vulnerable Software and Affected Versions jeecg-boot versions 3.0 through 3.5.3 Description The issue allows a remote attacker to execute arbitrary code via a crafted request to the "report/jeecgboot/jmreport/queryFieldBySql" component. This enables the attacker to inject SQL code,...

CVE-2023-40989

SQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted request to the report/jeecgboot/jmreport/queryFieldBySql component...