References https://github.com/adysec/POC/blob/main/wpoc/JeePlus%E4%BD%8E%E4%BB%A3%E7%A0%81%E5%BC%80%E5%8F%91%E5%B9%B3%E5%8F%B0/JeePlus%E4%BD%8E%E4%BB%A3%E7%A0%81%E5%BC%80%E5%8F%91%E5%B9%B3%E5%8F%B0%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md https://opc.csdn.net/696df573437a6b40336912d4.html https://www.ddpoc.com/DVB-2024-6137.html https://www.cnblogs.com/pt007/p/11956111.html https://cn-sec.com/archives/2517557.html https://avd.aliyun.com/detail?id=AVD-2021-904054 https://zhuanlan.zhihu.com/p/584148175 https://www.sxxdckj.com/cms/a/JEPaaS-SQL-zhu-ru-lou-dong.html https://www.ddpoc.com/DVB-2024-6157.html https://github.com/runZeroInc/nuclei-templates/blob/main/http/vulnerabilities/other/jeeplus-cms-resetpassword-sqli.yaml https://s4e.io/tools/jeeplus-cms-sql-injection https://cn-sec.com/archives/2997806.html https://cn-sec.com/archives/2470508.html https://avd.aliyun.com/detail?id=AVD-2021-903882
Related Vulnerabilities仁和兴业(深圳)软件有限公司仁和云ERP userresetPassword.action 存在任意账号密码重置漏洞PoCjeeplus-sql-injection: Jeeplus SQL injectionPoCjeeplus-sys-user-validate-sqli: JeePlus低代码开发平台SQL注入PoCseeyon-resetpassword-anyuser: 致远OA resetPassword任意用户密码修改漏洞PoCjeeplus-cms-resetpassword-sqli: JeePlus CMS - SQL InjectionPoCJeePlus低代码开发平台 getFile 任意文件读取漏洞JeePlus低代码开发平台 任意文件上传漏洞JeePlus平台 /a/sys/register/registerUser SQL 注入漏洞JeePlus-Vue快速开发平台 druid未授权访问漏洞jeeplus-vue快速开发平台 /download 任意文件读取漏洞Jeeplus /a/login 默认口令漏洞