EUVD-2024-39823

Malicious code in bioql PyPI...

CVE-2024-42913

RuoYi CMS v4.7.9 was discovered to contain a SQL injection vulnerability via the jobid parameter at /sasfs1...

CVE-2024-42913

RuoYi CMS v4.7.9 was discovered to contain a SQL injection vulnerability via the jobid parameter at /sasfs1...

CVE-2024-42913

RuoYi CMS v4.7.9 was discovered to contain a SQL injection vulnerability via the jobid parameter at /sasfs1...

PT-2024-30202

Name of the Vulnerable Software and Affected Versions RuoYi CMS versions prior to 4.7.9 Description The issue is related to a SQL injection vulnerability. It can be exploited via the job id parameter at the "/sasfs1" endpoint. This allows an unauthenticated attacker to manipulate the job id and...

CVE-2024-42913

CVE-2024-42913 affects RuoYi CMS v4.7.9 with a SQL injection via the job_id parameter in /sasfs1. Vulnerability details show remote network access with low attack complexity and no privileges required; resulting impact to confidentiality, integrity, and availability is high (per CVSS). No remedia...

CVE-2024-42913: Improper Neutralization of Special Elements used in an SQL Command

RuoYi CMS v4.7.9 was discovered to contain a SQL injection vulnerability via the jobid parameter at /sasfs1...

CVE-2024-42913

RuoYi CMS v4.7.9 was discovered to contain a SQL injection vulnerability via the jobid parameter at /sasfs1...

CVE-2024-42913

RuoYi CMS v4.7.9 was discovered to contain a SQL injection vulnerability via the jobid parameter at /sasfs1...

If a deserialization vulnerability exists in CMS

Ruoyi CMS is a set of domestic SpringBoot-based rights management system . Ruoyi CMS has a deserialization vulnerability that can be exploited by an attacker to deserialize arbitrary code execution by sending a JNDI request...