Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2023-38992

Disclosure Date: July 28, 2023 (last updated February 25, 2025)
jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData.
Attacker Value
Unknown

CVE-2023-34660

Disclosure Date: June 16, 2023 (last updated February 25, 2025)
jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface.
Attacker Value
Unknown

CVE-2023-34659

Disclosure Date: June 16, 2023 (last updated February 25, 2025)
jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface.