EUVD-2022-1204

Malicious code in bioql PyPI...

SQL Injection

com.mxpio:jeecg-boot-module-system is vulnerable to SQL injection attacks. An attacker is able to execute arbitrary SQL commands via id and realname parameters in queryUserByDepId function...

CVE-2022-22880

Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId...

CVE-2022-22880

Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId...

PT-2022-15714

Name of the Vulnerable Software and Affected Versions Jeecg-boot version 3.0 Description A SQL injection issue was found in Jeecg-boot via the code parameter in the "/jeecg-boot/sys/user/queryUserByDepId" API endpoint. Recommendations For Jeecg-boot version 3.0, consider restricting access to the...

CVE-2022-22880: Improper Neutralization of Special Elements used in an SQL Command

Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId...