CVE-2024-13029: Server-Side Request Forgery (SSRF)

A vulnerability, which was classified as problematic, was found in Antabot White-Jotter up to 0.2.2. Affected is an unknown function of the file /admin/content/book of the component Edit Book Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack...

PT-2024-17888

Name of the Vulnerable Software and Affected Versions Antabot White-Jotter versions up to 0.2.2 Description A problematic vulnerability has been found in the component Article Content Editor, specifically in an unknown function of the file /admin/content/editor. This manipulation leads to cross...

White-Jotter code injection vulnerability

White-Jotter is an Antabot personal developer's front-end and back-end separation project using Vue+Spring Boot development, comes with a full set of development tutorials. Antabot White-Jotter 0.2.2 and earlier versions have a code injection vulnerability that originates from the component artic...

CVE-2024-13032: Server-Side Request Forgery (SSRF)

A vulnerability classified as problematic was found in Antabot White-Jotter up to 0.2.2. Affected by this vulnerability is an unknown functionality of the file /admin/content/editor of the component Article Editor. The manipulation of the argument articleCover leads to server-side request forgery...

CVE-2024-13029

A vulnerability, which was classified as problematic, was found in Antabot White-Jotter up to 0.2.2. Affected is an unknown function of the file /admin/content/book of the component Edit Book Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack...

PT-2024-17886 · Unknown · Antabot White-Jotter

Name of the Vulnerable Software and Affected Versions: Antabot White-Jotter versions up to 0.2.2 Description: A problematic issue was found in the Edit Book Handler component, affecting an unknown function of the file /admin/content/book. This leads to server-side request forgery, which can be...

CVE-2024-5310

A vulnerability classified as problematic has been found in JFinalCMS up to 20221020. This affects an unknown part of the file /admin/content. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to th...

CVE-2024-5310

CVE-2024-5310 affects JFinalCMS up to version 20221020, with the vulnerability located in the unknown portion of the file /admin/content . The issue arises from manipulation of the Title argument, leading to Cross-Site Scripting (XSS) . Exploitation is possible remotely, and the exploit has been ...

PT-2024-35563

Name of the Vulnerable Software and Affected Versions JFinalCMS up to 20221020 Description A problematic issue has been found in JFinalCMS, affecting an unknown part of the file /admin/content. The manipulation of the Title argument leads to cross-site scripting. It is possible to initiate the...

CVE-2024-5310: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in JFinalCMS up to 20221020. This affects an unknown part of the file /admin/content. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to th...

PT-2024-40240 · Unknown · Ez Publish Legacy

Name of the Vulnerable Software and Affected Versions: ezpublish-legacy affected versions not specified Description: The issue is related to an information disclosure vulnerability in the legacy admin content tree menu. If a view has been disabled in site.ini SiteAccessRules Rules and an attacker...

CVE-2024-24029

JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data...

Sql injection

JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data...

PT-2024-20246

Name of the Vulnerable Software and Affected Versions JFinalCMS version 5.0.0 Description The issue is related to SQL injection via the "/admin/content/data" API endpoint. This allows for potential data manipulation. No information is provided about the estimated number of affected devices or...

CVE-2024-24029

JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data...

CVE-2024-24029: Improper Neutralization of Special Elements used in an SQL Command

JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data...

JFinalCMS Security Vulnerability

JFinalCMS is a content management system by heyewei personal developer. A security vulnerability exists in JFinalCMS version 5.0.0, which was discovered to contain an SQL injection vulnerability via /admin/content/data...

CVE-2024-24029

JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data...

CVE-2024-24029

JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data...

CVE-2023-5287

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as problematic, was found in BEECMS 4.0. This affects an unknown part of the file /admin/admincontenttag.php?action=savecontent. The manipulation of the argument tag leads to cross site scripting. It is possible to initiate the attac...