Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2025-51825

JeecgBoot versions from 3.4.3 up to 3.8.0 were found to contain a SQL injection vulnerability in the /jeecg-boot/online/cgreport/head/parseSql endpoint, which allows bypassing SQL blacklist restrictions.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Guojusoft Jeecg
Products
Jeecgboot Jeecgboot
CVE-2024-57606

SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote attacker to obtain sensitive information via the getTotalData component.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Guojusoft
Products
Jeecgboot
CVE-2020-23083

Unrestricted File Upload in JEECG v4.0 and earlier allows remote attackers to execute arbitrary code or gain privileges by uploading a crafted file to the component "jeecgFormDemoController.do?commonUpload".

CVSS 3.1 · 9.8 Critical EPSS 3.7% KEV · Not listed
Vendors
Guojusoft
Products
Jeecg