| शीर्षक | Beijing Guoju Information Technology Co., Ltd JeecgBoot 3.9.0 SQL Injection |
|---|
| विवरण | JeecgBoot is a low-code development platform by Beijing Guoju Information Technology Co., Ltd. It helps teams build enterprise web systems faster with code generation, visual configuration, and reusable modules. The platform typically integrates Spring Boot, Spring Cloud, MyBatis-Plus, and Vue/Ant Design Vue, providing ready-made features such as user/role management, permissions, workflow, online forms, reports, and API support. It is used to accelerate CRUD-based business applications and improve development efficiency.
In the JeecgBoot online report API /jeecgboot/sys/api/loadDictItemByKeyword, improper handling of subquery statements allows attackers to concatenate SQL statements outside the blacklist, resulting in an SQL injection vulnerability. |
|---|
| स्रोत | ⚠️ https://www.yuque.com/meizhiyuwai/sks4nu/clircmda9b8q66lo?singleDoc |
|---|
| उपयोगकर्ता | jjcc20220820 (UID 62296) |
|---|
| सबमिशन | 18/01/2026 01:22 PM (9 महीनों पहले) |
|---|
| संयम | 01/02/2026 06:12 PM (14 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 343677 [JeecgBoot 3.9.0 Online Report API loadDictItemByKeyword keyword SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|