Vulnerabilities (CVE)

Filtered by vendor Jeecg Subscribe
Filtered by product Jeecg Boot
Total 25 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-22881 1 Jeecg 1 Jeecg Boot 2022-02-24 7.5 HIGH 9.8 CRITICAL
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData.
CVE-2022-22880 1 Jeecg 1 Jeecg Boot 2022-02-24 7.5 HIGH 9.8 CRITICAL
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId.
CVE-2021-46089 1 Jeecg 1 Jeecg Boot 2022-01-28 10.0 HIGH 9.8 CRITICAL
In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges.
CVE-2020-28088 1 Jeecg 1 Jeecg Boot 2021-08-14 7.5 HIGH 9.8 CRITICAL
An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code.
CVE-2020-28087 1 Jeecg 1 Jeecg Boot 2021-08-14 5.0 MEDIUM 7.5 HIGH
A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information.