漏洞描述 Jeecg-boot v2.1.2-v3.0.0 后台未授权SQL注入漏洞存在未授权注入漏洞,可以未授权构造sql语句,获取信息。 fofa-query: title=="JeecgBoot 企业级低代码平台"
相关漏洞推荐 (CVE-2023-53885)Webutler v3.2 PHAR文件远程代码执行漏洞 (CVE-2023-53884)Webedition CMS v2.9.8.8 存储型跨站脚本漏洞 Fortinet FortiWeb /api/v2.0/cmdb/system/admin%3f/../../../../../cgi-bin/fwbcgi 权限绕过漏洞(CVE-2025-64446/CVE-2025-58034) Fortinet FortiWeb /api/v2.0/cmdb/system/admin%3f/../../../../../cgi-bin/fwbcgi 权限绕过漏洞(CVE-2025-64446) POC CVE-2025-44136: MapTiler Tileserver-php v2.0 - Unauthenticated XSS POC CVE-2025-44137: MapTiler Tileserver-php v2.0 - Unauthenticated File Read NodeBB /api/v3/search/categories SQL 注入漏洞(CVE-2025-50979) Hoverfly /api/v2/hoverfly/middleware 命令执行漏洞(CVE-2025-54123) wordpress /wp-json/wp/v2/users 信息泄露漏洞 Windows NTLMv2-SSP Hash信息泄露漏洞(CVE-2025-50154) Jeecgboot /jmreport/save远程代码执行漏洞 CVE-2019-16663: rConfig v3.9.2 RCE jeecgboot-commoncontroller-parserxml-fileupload: Jeecgboot commonController parserXml fileupload