Show filters
38 Total Results
Displaying 31-38 of 38
Sort by:
Attacker Value
Unknown
CVE-2022-2647
Disclosure Date: August 04, 2022 (last updated February 24, 2025)
A vulnerability was found in jeecg-boot. It has been declared as critical. This vulnerability affects unknown code of the file /api/. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-205594 is the identifier assigned to this vulnerability.
0
Attacker Value
Unknown
CVE-2021-44585
Disclosure Date: March 10, 2022 (last updated February 23, 2025)
A Cross Site Scripting (XSS) vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event.
0
Attacker Value
Unknown
CVE-2022-22881
Disclosure Date: February 16, 2022 (last updated February 23, 2025)
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData.
0
Attacker Value
Unknown
CVE-2022-22880
Disclosure Date: February 16, 2022 (last updated February 23, 2025)
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId.
0
Attacker Value
Unknown
CVE-2021-46089
Disclosure Date: January 25, 2022 (last updated February 23, 2025)
In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges.
0
Attacker Value
Unknown
CVE-2020-20948
Disclosure Date: December 27, 2021 (last updated February 23, 2025)
An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable.
0
Attacker Value
Unknown
CVE-2020-28088
Disclosure Date: August 06, 2021 (last updated February 23, 2025)
An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code.
0
Attacker Value
Unknown
CVE-2020-28087
Disclosure Date: August 06, 2021 (last updated February 23, 2025)
A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information.
0
