SQL Injection

Every one of the 25 is a mark on the map. Named now: 1 to 25, most at risk first.

1. Jeecg-Boot v3.5.1 - SQL InjectionCVE-2023-38992Jeecg · 73% likely

   CWE-89

2. JeecgBoot v3.7.1 - SQL InjectionCVE-2024-48307Jeecg · CVSS 9.8 · 50% likely

   CWE-89

3. Jeecg-boot 3.5.0 qurestSql - SQL InjectionCVE-2023-1454Jeecg · CVSS 6.3 · 36% likely

   CWE-89

4. JeecgBoot 3.5.0 - SQL InjectionCVE-2023-34659Jeecg · 12% likely

   CWE-89

5. SQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted request to the report/jeecgboot/jmreport/quer…CVE-2023-40989Jeecg · 2.2% likely

   CWE-89

6. In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges.CVE-2021-46089Jeecg · 2.0% likely

   CWE-89

7. A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information.CVE-2020-28087Jeecg · 1.6% likely

   CWE-89

8. Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData.CVE-2022-22881Jeecg · 1.4% likely

   CWE-89

9. Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId.CVE-2022-22880Jeecg · 1.4% likely

   CWE-89

10. Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.CVE-2022-47105Jeecg · CVSS 9.8 · 1.1% likely

    CWE-89

11. Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString.CVE-2022-45207Jeecg · CVSS 9.8 · 1.0% likely

    CWE-89

12. SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check.CVE-2023-41543Jeecg · 0.9% likely

    CWE-89

13. Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show.CVE-2023-42268Jeecg · 0.9% likely

    CWE-89

14. SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the jmreport/qurestSql component.CVE-2023-41542Jeecg · CVSS 9.8 · 0.9% likely

    CWE-89

15. jeecg-boot v3.4.4 was discovered to contain an authenticated SQL injection vulnerability via the building block report component.CVE-2023-24789Jeecg · CVSS 8.8 · 0.8% likely

    CWE-89

16. jeecg-boot Sleep Command SysDictMapper.java sql injectionCVE-2023-1741Jeecg · CVSS 4.3 · 0.8% likely

    CWE-89

17. Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check.CVE-2022-45206Jeecg · CVSS 9.8 · 0.8% likely

    CWE-89

18. JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByCode at org.jeecg.modules.api.controller.SystemApiController.CVE-2023-34602Jeecg · CVSS 7.5 · 0.7% likely

    CWE-89

19. JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at org.jeecg.modules.api.controller.SystemApiController.CVE-2023-34603Jeecg · CVSS 7.5 · 0.7% likely

    CWE-89

20. Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.CVE-2022-45205Jeecg · CVSS 5.3 · 0.7% likely

    CWE-89

21. Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/deleteRecycleBin.CVE-2022-45210Jeecg · CVSS 4.3 · 0.6% likely

    CWE-89

22. Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/user/putRecycleBin.CVE-2022-45208Jeecg · CVSS 4.3 · 0.6% likely

    CWE-89

23. JeecgBoot Online Report API loadDictItemByKeyword sql injectionCVE-2026-1746Jeecg · CVSS 6.3 · 0.5% likely

    CWE-89

24. JeecgBoot Backend airag_app,1,create_by sql injectionCVE-2026-2822Jeecg · CVSS 6.3 · 0.4% likely

    CWE-89

25. SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PG_Sleep, DBMS_Lock.Sleep, Waitfor, DECODE, an…CVE-2023-38905Jeecg · 0.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.