Lvzc3

A vulnerability was found in JoeyBling bootplus, affecting some unknown functionality of the file /admin/sys/admin.html. The manipulation leads to cross site scripting. The attack may be launched remotely.

A critical vulnerability has been found in JoeyBling bootplus. The issue affects an unknown functionality of the file /admin/sys/role/list. The manipulation of the `sort` argument leads to SQL injection. This can be exploited remotely.

A critical issue affects some unknown functionality of the file /admin/sys/log/list. The manipulation of the `logId` argument leads to SQL injection. This issue can be exploited remotely.

A critical issue has been found in JoeyBling bootplus, affecting an unknown part of the file /admin/sys/user/list. The manipulation of the `sort` argument leads to SQL injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

A critical vulnerability was found in JoeyBling bootplus, allowing for unrestricted file upload. The issue is related to the manipulation of the `portraitFile` argument in the unknown code of the file src/main/java/io/github/controller/SysFileController.java. This can be exploited remotely. The exploit has been publicly disclosed.

A problematic issue has been found in JoeyBling bootplus, affecting the processing of the file src/main/java/io/github/controller/SysFileController.java. The manipulation of the `name` argument leads to path traversal. This issue can be exploited remotely. The exploit has been disclosed to the public.

A problematic issue was found in the `qrCode` function of the `QrCodeController.java` file. The manipulation of the `w/h` argument leads to resource consumption. This issue can be exploited remotely.

A vulnerability has been found in the `qrCode` function of the file `src/main/java/io/github/controller/QrCodeController.java`. The manipulation of the `text` argument leads to an open redirect. The attack can be launched remotely.

A critical issue has been found, allowing for remote SQL injection. The manipulation of the `sort/order` argument in an unknown function of the file `/admin/sys/menu/list` leads to this issue. The exploit has been disclosed publicly and can be used remotely.

A critical issue affects the function `GoodsDaoImpl` of the file `src/main/java/com/liujian/gymxmjpa/controller/GoodsController.java`. The manipulation of the argument `goodsName` leads to SQL injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

A critical vulnerability has been found in the function `SubjectDaoImpl` of the file `src/main/java/com/liujian/gymxmjpa/controller/SubjectController.java`. The manipulation of the argument `subname` leads to SQL injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

A critical vulnerability has been found in the function `EquipmentDaoImpl` of the file `src/main/java/com/liujian/gymxmjpa/controller/EquipmentController.java`. The manipulation of the argument `hyname` leads to SQL injection. The attack can be launched remotely. A public exploit has been disclosed, making it potentially usable by attackers.

A critical issue has been found in the function `LoosDaoImpl` of the file `src/main/java/com/liujian/gymxmjpa/controller/LoosController.java`. The manipulation of the argument `loosName` leads to SQL injection. This issue can be exploited remotely. The exploit has been disclosed to the public and may be used.

A critical vulnerability has been found in the function `MembertypeDaoImpl` of the file `src/main/java/com/liujian/gymxmjpa/controller/MembertypeController.java`. The manipulation of the argument `typeName` leads to SQL injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

A critical vulnerability has been found that affects the MenberDaoInpl function in the file src/main/java/com/liujian/gymxmjpa/controller/MenberConntroller.java. The manipulation of the `hyname` argument leads to SQL injection. The attack can be initiated remotely. A public exploit for this vulnerability has been disclosed, which may be used by attackers to exploit the vulnerability.

A critical vulnerability has been found in the CoachController function of the file src/main/java/com/liujian/gymxmjpa/controller/CoachController.java. The manipulation of the `coachName` argument leads to SQL injection. The attack can be initiated remotely. The details of the exploit are available to the public, which means it may be used by attackers.