Filtered by vendor Jeecg
Subscribe
Total
24 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2021-46089 | 1 Jeecg | 1 Jeecg Boot | 2024-02-04 | 10.0 HIGH | 9.8 CRITICAL |
In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges. | |||||
CVE-2020-20948 | 1 Jeecg | 1 Jeecg | 2024-02-04 | 5.0 MEDIUM | 7.5 HIGH |
An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable. | |||||
CVE-2020-28087 | 1 Jeecg | 1 Jeecg Boot | 2024-02-04 | 5.0 MEDIUM | 7.5 HIGH |
A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information. | |||||
CVE-2020-28088 | 1 Jeecg | 1 Jeecg Boot | 2024-02-04 | 7.5 HIGH | 9.8 CRITICAL |
An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code. |