Security
Headlines
HeadlinesLatestCVEs

Tag

#sql

GHSA-g5cj-5h58-j93w: Jeecg-boot vulnerable to SQL Injection

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check.

ghsa
Open in Source
#sql#vulnerability#git
GHSA-4j2x-v3mr-467m: Jeecg-boot vulnerable to SQL injection via updateNullByEmptyString

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString.

GHSA-v87q-rpwp-qr7q: Jeecg-boot vulnerable to SQL Injection

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/deleteRecycleBin.

GHSA-25gv-mvm7-5h3h: Jeecg-boot vulnerable to SQL injection via /sys/user/putRecycleBin

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/putRecycleBin.

CVE-2022-0698: GitHub - microweber/microweber: Drag and Drop Website Builder and CMS with E-commerce

Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter.

CVE-2022-44859: bug_report/SQLi-2.md at main · thir3een/bug_report

Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/admin/products/manage_product.php.

CVE-2022-44860: bug_report/SQLi-3.md at main · thir3een/bug_report

Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/transactions/update_status.php.

CVE-2022-44858: bug_report/SQLi-1.md at main · thir3een/bug_report

Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/products/view_product.php.

CVE-2022-45206: /sys/duplicate/check存在sql注入漏洞 · Issue #4129 · jeecgboot/jeecg-boot

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check.

CVE-2022-45210

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/deleteRecycleBin.