← Back

Guojusoft

guojusoft

3 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Jeecgboot
jeecgboot
2 CVEs
Jeecg
jeecg
1 CVE

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-51825
1Guojusoft
1Jeecgboot
Jun 17, 2026
Aug 22, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
JeecgBoot versions from 3.4.3 up to 3.8.0 were found to contain a SQL injection vulnerability in the /jeecg-boot/online/cgreport/head/parseSql endpoint, which allows bypassing SQL blacklist restrictions.
CVE-2024-57606
1Guojusoft
1Jeecgboot
Jun 17, 2026
Feb 7, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote attacker to obtain sensitive information via the getTotalData component.
CVE-2020-23083
1Guojusoft
1Jeecg
Jun 17, 2026
May 3, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Unrestricted File Upload in JEECG v4.0 and earlier allows remote attackers to execute arbitrary code or gain privileges by uploading a crafted file to the component "jeecgFormDemoController.do?commonUpload".