Jeecg Boot SQL Injection

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-41543 · ADVISORY
• jeecgboot/jeecg-boot · PACKAGE
• mp.weixin.qq.com/s/q6R-kaN4XS5d_cgWtq46vw · WEB
• pho3n1x-web.github.io/2023/09/18/CVE-2023-41543%28JeecgBoot_sql%29 · WEB
• pho3n1x-web.github.io/2023/09/18/CVE-2023-41543%28JeecgBoot_sql%29 · Exploit

org.jeecgframework.boot:jeecg-boot-common のその他の脆弱性

• CVE-2024-57606高 7.5SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote attacker to obtain sensitive …
• CVE-2023-41544緊急 9.8SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the …
• CVE-2023-41542緊急 9.8SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via…
• CVE-2023-47467中 6.5Directory Traversal vulnerability in jeecg-boot v.3.6.0 allows a remote privileged attacker to obtain sensitive information via the file dir…
• CVE-2023-40989緊急 9.8SQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted reques…