CVE-2026-1835

CVE-2026-1835 affects lcg0124 BootDo, with versions prior to e93dd428ef6f5c881aa74d49a2099ab0cf1e0fcb identified as vulnerable. The issue is a cross-site request forgery that can be exploited remotely and for which an exploit is publicly available. The affected product uses a rolling release stra...

CVE-2026-1835: Cross-Site Request Forgery (CSRF)

A vulnerability was identified in lcg0124 BootDo up to e93dd428ef6f5c881aa74d49a2099ab0cf1e0fcb. This affects an unknown part. The manipulation leads to cross-site request forgery. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. This product...

BootDo 安全漏洞

BootDo is a backend management system framework developed by lcg0124. BootDo has a security vulnerability, which stems from an operation that leads to cross-site request forgery...

CVE-2026-1406: URL Redirection to Untrusted Site

A vulnerability was determined in lcg0124 BootDo up to 5ccd963c74058036b466e038cff37de4056c1600. Affected by this vulnerability is the function redirectToLogin of the file AccessControlFilter.java of the component Host Header Handler. This manipulation of the argument Hostname causes open redirec...

CVE-2026-1136: Improper Neutralization of Input During Web Page Generation

A weakness has been identified in lcg0124 BootDo up to e93dd428ef6f5c881aa74d49a2099ab0cf1e0fcb. Affected is the function Save of the file /blog/bContent/save of the component ContentController. This manipulation of the argument content/author/title causes cross site scripting. Remote exploitatio...