CVE-2024-12348 Guizhou Xiaoma Technology jpress Attachment Upload upload AttachmentUtils.isUnSafe cross site scripting

A vulnerability was found in Guizhou Xiaoma Technology jpress 5.1.2. It has been classified as problematic. Affected is the function AttachmentUtils.isUnSafe of the file /commons/attachment/upload of the component Attachment Upload Handler. The manipulation of the argument files leads to cross si...

JPress 安全漏洞

JPress is a blogging platform developed in Java language by JPress team. A security vulnerability exists in JPress version 5.1.2, which stems from a cross-site scripting vulnerability contained in the files parameter of the ttachmentUtils.isUnSafe function on the /commons/attachment/upload page o...

PT-2024-17557 · Guizhou Xiaoma Technology · Jpress

Name of the Vulnerable Software and Affected Versions: Guizhou Xiaoma Technology jpress version 5.1.2 Description: A problem was found in the Attachment Upload Handler's function AttachmentUtils.isUnSafe of the file /commons/attachment/upload. The manipulation of the argument files leads to cross...

CVE-2024-11971

A vulnerability classified as problematic was found in Guizhou Xiaoma Technology jpress 5.1.2. Affected by this vulnerability is an unknown functionality of the file /commons/attachment/upload of the component Avatar Handler. The manipulation of the argument files leads to cross site scripting. T...

CVE-2024-11971 Guizhou Xiaoma Technology jpress Avatar upload cross site scripting

A vulnerability classified as problematic was found in Guizhou Xiaoma Technology jpress 5.1.2. Affected by this vulnerability is an unknown functionality of the file /commons/attachment/upload of the component Avatar Handler. The manipulation of the argument files leads to cross site scripting. T...

CVE-2024-11971 Guizhou Xiaoma Technology jpress Avatar upload cross site scripting

A vulnerability classified as problematic was found in Guizhou Xiaoma Technology jpress 5.1.2. Affected by this vulnerability is an unknown functionality of the file /commons/attachment/upload of the component Avatar Handler. The manipulation of the argument files leads to cross site scripting. T...

CVE-2024-11971 Guizhou Xiaoma Technology jpress Avatar upload cross site scripting

A vulnerability classified as problematic was found in Guizhou Xiaoma Technology jpress 5.1.2. Affected by this vulnerability is an unknown functionality of the file /commons/attachment/upload of the component Avatar Handler. The manipulation of the argument files leads to cross site scripting. T...

CVE-2024-11971

CVE-2024-11971 affects Guizhou Xiaoma Technology jpress 5.1.2. The vulnerability resides in the Avatar Handler’s file upload endpoint at /commons/attachment/upload, where manipulating the files argument leads to cross-site scripting. The issue can be triggered remotely and exploits have been disc...

JPress 代码注入漏洞

JPress is a blogging platform developed in Java language by JPress team. A code injection vulnerability exists in JPress version 5.1.2, which stems from the parameter files being vulnerable to cross-site scripting attacks...

CVE-2024-50919

Jpress until v5.1.1 has arbitrary file uploads on the windows platform, and the construction of non-standard file formats such as .jsp. can lead to arbitrary command execution...

PT-2024-34453 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Jpress versions prior to 5.1.1 Description: The issue allows for arbitrary file uploads on the Windows platform. This can lead to the construction of non-standard file formats, such as .jsp, which can result in arbitrary command execution...

Jpress 安全漏洞

Jpress is a set of blogging platform developed in Java language by Jpress team. A security vulnerability exists in Jpress v5.1.1 and earlier versions, which stems from an arbitrary file upload vulnerability...

CVE-2024-50919

Jpress until v5.1.1 has arbitrary file uploads on the windows platform, and the construction of non-standard file formats such as .jsp. can lead to arbitrary command execution...

CVE-2024-50919

Jpress until v5.1.1 has arbitrary file uploads on the windows platform, and the construction of non-standard file formats such as .jsp. can lead to arbitrary command execution...

CVE-2024-50919

Jpress until v5.1.1 has arbitrary file uploads on the windows platform, and the construction of non-standard file formats such as .jsp. can lead to arbitrary command execution...

CVE-2024-50919

CVE-2024-50919 affects Jpress prior to v5.1.1 on Windows, where arbitrary file uploads (including non-standard formats like .jsp) can lead to arbitrary command execution. The issue is described as a critical impact (CVSS 9.8; NETWORK vector, user interaction: none). Exploitation details are not p...

Guizhou small code technology limited company jpress exist file upload vulnerability

jpress is a complete Java CMS web management system. Ltd. jpress has a file upload vulnerability, which can be exploited by attackers to obtain sensitive information such as user cookies by uploading files...

CVE-2024-46468

A Server-Side Request Forgery SSRF vulnerability exists in the jpress = v5.1.1, which can be exploited by an attacker to obtain sensitive information, resulting in an information disclosure...

CVE-2024-46468

A Server-Side Request Forgery SSRF vulnerability exists in the jpress = v5.1.1, which can be exploited by an attacker to obtain sensitive information, resulting in an information disclosure...

Jpress 安全漏洞

Jpress is a set of blogging platform developed in Java language by Jpress team. A security vulnerability exists in Jpress 5.1.1 and earlier versions, which stems from vulnerability to server-side request forgery attacks, leading to the disclosure of sensitive information...