4273 matches found
PT-2025-2060 · Wander Chu · Springboot-Blog
Name of the Vulnerable Software and Affected Versions: wander-chu SpringBoot-Blog version 1.0 Description: A vulnerability was found in the function modifiyArticle of the file src/main/java/com/my/blog/website/controller/admin/PageController.java of the component Blog Article Handler. The...
REDAXO Code Injection Vulnerability
REDAXO is REDAXO open source a content management system . REDAXO 5.18.1 version of the existence of code injection vulnerability , the vulnerability stems from the file / index.php?page=structure&categoryid=1&articleid=1&clang=1&function=editart&artstart=0 of Article Name parameter can lead to...
CVE-2024-13209: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Redaxo CMS 5.18.1. It has been classified as problematic. Affected is an unknown function of the file /index.php?page=structure&categoryid=1&articleid=1&clang=1&function=editart&artstart=0 of the component Structure Management Page. The manipulation of the argument...
CVE-2024-13202: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in wander-chu SpringBoot-Blog 1.0 and classified as problematic. This issue affects the function modifiyArticle of the file src/main/java/com/my/blog/website/controller/admin/PageController.java of the component Blog Article Handler. The manipulation of the argument...
emlog code injection vulnerability
emlog is a PHP and MySQL based CMS builder. A cross-site scripting vulnerability exists in the emlog /admin/article.php processing IMAGE, which can be exploited by remote attackers to inject malicious script or HTML code that can be used to obtain sensitive information or hijack user sessions whe...
Information Exposure
Overview collaborative-article-sharing is a Command-line interface for interacting with the CAS API Affected versions of this package are vulnerable to Information Exposure because the Flask application runs in debug mode in a production environment. Remediation Upgrade...
CVE-2024-13032
A vulnerability classified as problematic was found in Antabot White-Jotter up to 0.2.2. Affected by this vulnerability is an unknown functionality of the file /admin/content/editor of the component Article Editor. The manipulation of the argument articleCover leads to server-side request forgery...
CVE-2024-13032 Antabot White-Jotter Article Editor editor server-side request forgery
A vulnerability classified as problematic was found in Antabot White-Jotter up to 0.2.2. Affected by this vulnerability is an unknown functionality of the file /admin/content/editor of the component Article Editor. The manipulation of the argument articleCover leads to server-side request forgery...
CVE-2024-13032 Antabot White-Jotter Article Editor editor server-side request forgery
A vulnerability classified as problematic was found in Antabot White-Jotter up to 0.2.2. Affected by this vulnerability is an unknown functionality of the file /admin/content/editor of the component Article Editor. The manipulation of the argument articleCover leads to server-side request forgery...
CVE-2024-13032
A vulnerability classified as problematic was found in Antabot White-Jotter up to 0.2.2. Affected by this vulnerability is an unknown functionality of the file /admin/content/editor of the component Article Editor. The manipulation of the argument articleCover leads to server-side request forgery...
CVE-2024-13032 Antabot White-Jotter Article Editor editor server-side request forgery
A vulnerability classified as problematic was found in Antabot White-Jotter up to 0.2.2. Affected by this vulnerability is an unknown functionality of the file /admin/content/editor of the component Article Editor. The manipulation of the argument articleCover leads to server-side request forgery...
CVE-2024-13032
The CVE-2024-13032 entry affects Antabot White-Jotter (
CVE-2024-13031
A vulnerability classified as problematic has been found in Antabot White-Jotter up to 0.2.2. Affected is an unknown function of the file /admin/content/editor of the component Article Content Editor. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Th...
CVE-2024-13031 Antabot White-Jotter Article Content Editor editor cross site scripting
A vulnerability classified as problematic has been found in Antabot White-Jotter up to 0.2.2. Affected is an unknown function of the file /admin/content/editor of the component Article Content Editor. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Th...
CVE-2024-13031
The CVE-2024-13031 affects Antabot White-Jotter up to version 0.2.2. Affected component: /admin/content/editor in the Article Content Editor. Root cause: cross-site scripting due to an issue in the editor’s handling, enabling remote exploitation. The vulnerability is publicly disclosed and can be...
PT-2024-17889 · Unknown · Antabot White-Jotter
Name of the Vulnerable Software and Affected Versions: Antabot White-Jotter versions up to 0.2.2 Description: A problematic issue has been found in the Article Editor component, specifically in the /admin/content/editor file, affecting an unknown functionality. The manipulation of the articleCove...
CVE-2024-13031: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic has been found in Antabot White-Jotter up to 0.2.2. Affected is an unknown function of the file /admin/content/editor of the component Article Content Editor. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Th...
PT-2024-17888
Name of the Vulnerable Software and Affected Versions Antabot White-Jotter versions up to 0.2.2 Description A problematic vulnerability has been found in the component Article Content Editor, specifically in an unknown function of the file /admin/content/editor. This manipulation leads to cross...
White-Jotter code issue vulnerabilities
White-Jotter is a front-end and back-end separation project developed by Antabot personal developer using Vue+Spring Boot, with a full set of development tutorials. A code issue vulnerability exists in White-Jotter 0.2.2 and earlier versions, which stems from the articleCover parameter of the fil...
CVE-2024-13032: Server-Side Request Forgery (SSRF)
A vulnerability classified as problematic was found in Antabot White-Jotter up to 0.2.2. Affected by this vulnerability is an unknown functionality of the file /admin/content/editor of the component Article Editor. The manipulation of the argument articleCover leads to server-side request forgery...