A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through…

JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalData

SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component

SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check

SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the jmreport/qurestSql component

SQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted request to the…

Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show

jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData

jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface

A vulnerability was found in jeecg-boot 3.5.0 and classified as critical

A vulnerability was found in jeecg-boot 3.5.0

A vulnerability classified as critical has been found in jeecg-boot 3.5.0

Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check

jeecg-boot unrestricted upload

Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData

Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId

In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges

An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code

JeecgBoot Backend airag_app,1,create_by sql injection

JeecgBoot Online Report API loadDictItemByKeyword sql injection

JeecgBoot sendMsg improper authorization

JeecgBoot WebSocket Message sendWebSocketMsg improper authorization

JeecgBoot SysUserOnlineController.java SysUserOnlineController user session

JeecgBoot Multi-Tenant Management SysTenantController.java improper authentication

JeecgBoot Retrieval-Augmented Generation AiragKnowledgeController.java importDocumentFromZip deserialization

JeecgBoot getPositionUserList improper authorization

JeecgBoot Document Library Upload zip unzipFile resource consumption

Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection

A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information

JeecgBoot uploadImgByHttp server-side request forgery

JeecgBoot exportXls improper authorization

JeecgBoot exportXls improper authorization

JeecgBoot exportXls improper authorization

JeecgBoot Filter exportXls improper authorization

JeecgBoot Tenant Log Export exportLog improper authorization

Directory Traversal vulnerability in jeecg-boot v.3.6.0 allows a remote privileged attacker to obtain sensitive information via the file directory structure

jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface

Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability

Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability

A Cross Site Scripting (XSS) vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event

SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PG_Sleep, DBMS_Lock.Sleep, Waitfor, DECODE,…

JeecgBoot deleteBatch improper authorization

JeecgBoot getDepartUserList improper authorization

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData

JeecgBoot getDeptRoleByUserId information disclosure

JeecgBoot Retrieval-Augmented Generation edit path traversal

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/deleteRecycleBin