📦 Bootplus

This CVE describes a path traversal vulnerability in JoeyBling bootplus that allows attackers to access files outside the intended directory by manipulating the 'name' parameter in SysFileController.j...

This CVE describes an open redirect vulnerability in JoeyBling bootplus software. Attackers can manipulate the 'text' parameter in the qrCode function to redirect users to malicious websites. Any syst...

This CVE describes a critical SQL injection vulnerability in JoeyBling bootplus's admin interface at /admin/sys/log/list. Attackers can exploit the logId parameter to execute arbitrary SQL commands re...

This CVE describes a critical SQL injection vulnerability in JoeyBling bootplus software affecting the /admin/sys/role/list endpoint. Attackers can exploit this by manipulating the 'sort' parameter to...