Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unrestricted File Upload in JEECG v4.0 and earlier allows remote attackers to execute arbitrary code or gain privileges by uploading a crafted file to the component "jeecgFormDemoController.do?commonUpload".
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
JEECG 代码问题漏洞
Vulnerability Description
jeecg是一个应用软件。一款基于代码生成器的智能开发平台。 JEECG v4.0 版本及之前版本存在安全漏洞，该漏洞源于无限制文件上传，攻击者可利用该漏洞执行任意代码或通过上传一个精心制作的文件到组件“jeecgFormDemoController.do”来获得特权。
CVSS Information
N/A
Vulnerability Type
N/A