GCVE - cpe:2.3:a:jrecms:springbootcms:1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jrecms:springbootcms:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	Jrecms (`3074c338-a495-5cbb-895b-a757649da1cd`)
Product	Springbootcms (`16f97fbd-a1a4-52ae-8881-6614c5d4de07`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-43192`	vulnerable	2026-06-08 06:11:11.002261	Details available SQL injection can exist in a newly created part of the SpringbootCMS 1.0 background, and the parameters submitted by users are not filtered. As a result, special characters in parameters destroy the original logic of SQL statements. Attackers can use this vulnerability to execute any SQL statement. Published: 2023-09-27T00:00:00.000Z Updated: 2024-09-24T14:24:50.700Z Open on db.gcve.eu Reference links https://github.com/etn0tw/cve_sql/blob/main/jfinalcms_sql.md https://github.com/etn0tw/cve_sql/blob/main/springbootcms_sql.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-43191`	vulnerable	2026-06-08 06:11:11.001795	Details available SpringbootCMS 1.0 foreground message can be embedded malicious code saved in the database. When users browse the comments, these malicious codes embedded in the HTML will be executed, and the user's browser will be controlled by the attacker, so as to achieve the special purpose of the attacker, such as cookie theft Published: 2023-09-27T00:00:00.000Z Updated: 2024-09-24T13:15:27.811Z Open on db.gcve.eu Reference links https://github.com/etn0tw/cmscve_test/blob/main/README.md	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.