CVE-2024-25763

openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c...

openNDS Security Vulnerabilities

openNDS is openNDS open source a high-performance, small footprint portal system. A security vulnerability exists in openNDS version 10.2.0, which originates from a post-release reuse vulnerability in the /openNDS/src/auth.c file...

CVE-2024-1256

A vulnerability was found in Jspxcms 10.2.0 and classified as problematic. This issue affects some unknown processing of the file /ext/collect/filtertext.do. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may ...

Cross site scripting

A vulnerability was found in Jspxcms 10.2.0 and classified as problematic. This issue affects some unknown processing of the file /ext/collect/filtertext.do. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may ...

CVE-2024-1257 Jspxcms find_text.do cross site scripting

A vulnerability was found in Jspxcms 10.2.0. It has been classified as problematic. Affected is an unknown function of the file /ext/collect/findtext.do. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and...

CVE-2024-1257

CVE-2024-1257 affects Jspxcms 10.2.0. The vulnerability is in the function/file /ext/collect/find_text.do and enables cross-site scripting. Exploitation is possible remotely, and public exploit information exists. The linked sources confirm XSS impact but do not provide concrete exploit details b...

CVE-2024-1256 Jspxcms filter_text.do cross site scripting

A vulnerability was found in Jspxcms 10.2.0 and classified as problematic. This issue affects some unknown processing of the file /ext/collect/filtertext.do. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may ...

Jspxcms Cross-Site Scripting Vulnerability

Blue Intelligence Technology Jspxcms is a scalable enterprise-level open source web content management system CMS from China's Blue Intelligence Technology Company. A cross-site scripting vulnerability exists in Jspxcms version 10.2.0. An attacker can exploit this vulnerability to perform...

PT-2024-17654 · Jspxcms · Jspxcms

Name of the Vulnerable Software and Affected Versions: Jspxcms version 10.2.0 Description: A vulnerability was found in the processing of the file /ext/collect/filter text.do, which leads to cross-site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public a...

Jspxcms Cross-Site Scripting Vulnerability

Blue Intelligence Technology Jspxcms is a scalable enterprise-level open source web content management system CMS from China's Blue Intelligence Technology Company. A cross-site scripting vulnerability exists in Jspxcms version 10.2.0. An attacker can exploit this vulnerability to perform...

PT-2024-17658 · Jspxcms · Jspxcms

Name of the Vulnerable Software and Affected Versions: Jspxcms version 10.2.0 Description: A vulnerability was found in Jspxcms, classified as problematic. It affects an unknown function of the file /ext/collect/find text.do. The manipulation leads to cross site scripting and can be launched...

Jspxcms Security Vulnerabilities

BlueSmart Technology Jspxcms is a scalable enterprise-level open source web content management system CMS from China's BlueSmart Technology. A security vulnerability exists in Jspxcms version 10.2.0, which originates from the file /template/1/default/ can lead to information leakage...

PT-2024-17394 · Jspxcms · Jspxcms

Name of the Vulnerable Software and Affected Versions: Jspxcms version 10.2.0 Description: A vulnerability was found in Jspxcms and classified as problematic. It affects some unknown functionality of the file /template/1/default/. The manipulation leads to information disclosure. The attack may b...

Cross site scripting

A vulnerability has been found in Jspxcms 10.2.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Survey Label Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to...

CVE-2024-0721

CVE-2024-0721 affects Jspxcms 10.2.0, specifically the Survey Label Handler component. The vulnerability enables cross-site scripting due to insufficient input filtering/escaping in that handler. Exploitation is possible remotely and the vulnerability has been publicly disclosed. Connected source...

PT-2024-15780 · Jspxcms · Jspxcms

Name of the Vulnerable Software and Affected Versions: Jspxcms version 10.2.0 Description: A vulnerability has been found in the Survey Label Handler component, which can be exploited to lead to cross site scripting. The attack can be launched remotely. The manipulation of an unknown functionalit...

Jspxcms 跨站脚本漏洞

Jspxcms is a scalable enterprise-class open source web content management system CMS. Jspxcms version 10.2.0 cross-site scripting vulnerability , the vulnerability stems from the lack of effective user-supplied data filtering and escaping component Survey Label Handler , an attacker can exploit t...

CVE-2024-0599 Jspxcms Document Management Page InfoController.java cross site scripting

A vulnerability was found in Jspxcms 10.2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file src\main\java\com\jspxcms\core\web\back\InfoController.java of the component Document Management Page. The manipulation of the argument title...

CVE-2024-0599

CVE-2024-0599 affects Jspxcms 10.2.0 in the Document Management Page, specifically the InfoController.java component. The vulnerability is a cross-site scripting (XSS) flaw caused by unsafely handling the title argument, enabling remote exploitation. Public exploit availability is indicated in th...

Jspxcms Cross-Site Scripting Vulnerability

BlueIntelligence Jspxcms is a scalable enterprise-level open source web content management system CMS from China's BlueIntelligence Technology Company. A cross-site scripting vulnerability exists in Jspxcms version 10.2.0, which stems from a cross-site scripting XSS vulnerability in the component...