Show filters
37 Total Results
Displaying 21-30 of 37
Sort by:
Attacker Value
Unknown
CVE-2021-37305
Disclosure Date: February 03, 2023 (last updated February 24, 2025)
An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: /sys/user/querySysUser?username=admin.
0
Attacker Value
Unknown
CVE-2021-37304
Disclosure Date: February 03, 2023 (last updated February 24, 2025)
An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive information via the httptrace interface.
0
Attacker Value
Unknown
CVE-2022-47105
Disclosure Date: January 19, 2023 (last updated February 24, 2025)
Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.
0
Attacker Value
Unknown
CVE-2022-45210
Disclosure Date: November 25, 2022 (last updated February 24, 2025)
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/deleteRecycleBin.
0
Attacker Value
Unknown
CVE-2022-45208
Disclosure Date: November 25, 2022 (last updated February 24, 2025)
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/putRecycleBin.
0
Attacker Value
Unknown
CVE-2022-45207
Disclosure Date: November 25, 2022 (last updated February 24, 2025)
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString.
0
Attacker Value
Unknown
CVE-2022-45206
Disclosure Date: November 25, 2022 (last updated February 24, 2025)
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check.
0
Attacker Value
Unknown
CVE-2022-45205
Disclosure Date: November 25, 2022 (last updated February 24, 2025)
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.
0
Attacker Value
Unknown
CVE-2022-2647
Disclosure Date: August 04, 2022 (last updated February 24, 2025)
A vulnerability was found in jeecg-boot. It has been declared as critical. This vulnerability affects unknown code of the file /api/. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-205594 is the identifier assigned to this vulnerability.
0
Attacker Value
Unknown
CVE-2021-44585
Disclosure Date: March 10, 2022 (last updated February 23, 2025)
A Cross Site Scripting (XSS) vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event.
0
