Huayi-tec Jeewms

JeeWMS cgformTemplateController.do doAdd path traversal

JeeWMS generateController.do dogenerate sql injection

JeeWMS File generateController.do dogenerate access control

JeeWMS File generateController.do dogenerateOne2Many access control

JeeWMS cgAutoListController.do CgAutoListController sql injection

JeeWMS cgformTransController.do transEditor sql injection

JeeWMS File filedeal.do filedeal access control

JEEWMS 20250820 is vulnerable to SQL Injection in the exportXls function located in the src/main/java/org/jeecgframework/web/cgreport/controller/excel/CgExportExcelController.java file.

Guangzhou Huayi Intelligent Technology Jeewms graphReportController.do datagridGraph sql injection

erzhongxmu Jeewms AuthInterceptor cgReportController.do sql injection

Guangzhou Huayi Intelligent Technology Jeewms CgFormBuildController. java saveOrUpdate sql injection

An arbitrary file upload vulnerability in the parserXML() method of JeeWMS before v2025.01.01 allows attackers to execute arbitrary code via uploading a crafted file.

Guangzhou Huayi Intelligent Technology Jeewms WmOmNoticeHController.java preHandle information disclosure

Guangzhou Huayi Intelligent Technology Jeewms wmOmNoticeHController.do path traversal

Guangzhou Huayi Intelligent Technology Jeewms Druid Monitoring Interface index.html improper authorization

An arbitrary file upload vulnerability exists in JeeWMS 20250820, which is caused by the lack of file checking in the saveFiles function in /jeewms/cgUploadController.do. An attacker with normal privileges was able to upload a malicious file that would lead to remote code execution.

JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through the id1 and id2 parameters in the /systemControl.do interface for attack.

erzhongxmu JEEWMS JeecgListDemoController.java doAdd cross site scripting

A Cross Site Scripting vulnerability in JeeWMS v.3.7 and before allows a remote attacker to obtain sensitive information via the logController.do component