The latest version of JeeWMS contains several vulnerabilities.

The latest version of JeeWMS contains several vulnerabilities. To prevent malicious exploitation, only the names of the vulnerabilities are listed in this issue. Detailed vulnerability principles, PoCs, and other relevant information have been sent to your company's email (zwd@huayi-tec.com) from lesion1999@163.com, with the subject line "JeeWMS Vulnerability Report". Please check your inbox and address the issues as soon as possible.

The latest version of JeeWMS has several vulnerabilities as follows:

**CgAutoListController_datagrid_sqli**

The method datagrid (request path "/cgAutoListController.do?datagrid") in controller CgAutoListController has an sql injection vulnerability.

**CgformTemplateController_doAdd_pathtraversal**

The method doAdd (request path "/cgformTemplateController.do?doAdd") in controller CgformTemplateController has an path traversal vulnerability, allowing arbitrary files to be copied to any directory and delete files with a specific format.

**CgformTemplateController_showPic_fileread**

The method showPic (request path "cgformTemplateController.do?showPic") in controller CgformTemplateController has an arbitrary file read vulnerability.

**CgformTransController_transEditor_sqli**

The method transEditor (request path "/cgformTransController.do?transEditor") in controller CgformTransController has an sql injection vulnerability.

**GenerateController_dogenerate_filewrite**

The method dogenerate (request path "/generateController.do?dogenerate") in controller GenerateController has an arbitrary file writes vulnerability.

**GenerateController_dogenerate_rce**

The method dogenerate (request path "/generateController.do?dogenerate") in controller GenerateController has an RCE vulnerability. The vulnerability allows attackers to write controllable JSP files at arbitrary locations, leading to RCE.

**GenerateController_dogenerate_sqli**

The method dogenerate (request path "/generateController.do?dogenerate") in controller GenerateController has an sql injection vulnerability.

**GenerateController_dogenerateOne2Many_filewrite**

The method dogenerateOne2Many (request path "/generateController.do?dogenerateOne2Many") in controller GenerateController has an Arbitrary File Write vulnerability.

**GenerateController_dogenerateOne2Many_rce**

The method dogenerateOne2Many (request path "/generateController.do?dogenerateOne2Many") in controller GenerateController has an RCE vulnerability. The vulnerability allows attackers to write controllable JSP files at arbitrary locations, leading to RCE.

**SystemController_filedeal_filewrite**

The method filedeal (request path "/systemController/filedeal.do") in controllerSystemController has an arbitrary file writes vulnerability.

GVP JeeWMS/JeeWMS

Content Risk Flag

Comments (0)

GVPJeeWMS/JeeWMS

Content Risk Flag