148 matches found
OneBlog 安全漏洞
OneBlog is a Java blog. A cross-site scripting vulnerability exists in OneBlog v2.3.4, which stems from the lack of effective filtering and escaping of user-supplied data in the component rootpath/links, and can be exploited by an attacker to execute arbitrary web script or HTML by injecting a...
CVE-2024-29471
OneBlog v2.3.4 was discovered to contain a stored cross-site scripting XSS vulnerability via the Notice Manage module...
OneBlog 安全漏洞
OneBlog is a beautiful and powerful Java blog. A security vulnerability exists in OneBlog v2.3.4, which stems from a stored cross-site scripting XSS vulnerability in the Notice Manage module...
CVE-2024-29471
OneBlog v2.3.4 was discovered to contain a stored cross-site scripting XSS vulnerability via the Notice Manage module...
OneBlog 安全漏洞
OneBlog is a Java blog. A cross-site scripting vulnerability exists in OneBlog v2.3.4, which stems from a lack of effective filtering and escaping of user-supplied data in the User Management module, and can be exploited by an attacker to execute arbitrary Web script or HTML by injecting a...
OneBlog License Issues Vulnerabilities
OneBlog is a beautiful, powerful Java blog. An authorization issue vulnerability exists in OneBlog v2.3.4, which stems from the presence of insecure privileges in the program, and can be exploited by an attacker to allow a low-level administrator to reset the password of a high-level administrato...
OneBlog entryUrls parameter server-side request forgery vulnerability
OneBlog is a Java blog. version v2.3.4 of OneBlog contains a server-side request forgery vulnerability in which the source parameter entryUrls fails to properly validate user input and can be exploited to probe the server's intranet resources...
OneBlog Logo Parameter Server-Side Request Forgery Vulnerability
OneBlog is a beautiful and powerful Java blog. OneBlog v2.3.4 version exists server-side request forgery vulnerability, the vulnerability stems from the Link module under the Logo parameter fails to correctly validate the user input, an attacker can use the vulnerability to probe the server...
CVE-2022-34012
Insecure permissions in OneBlog v2.3.4 allows low-level administrators to reset the passwords of high-level administrators who hold greater privileges...
CVE-2022-34011
OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery SSRF vulnerability via the parameter entryUrls...
CVE-2022-34012
Insecure permissions in OneBlog v2.3.4 allows low-level administrators to reset the passwords of high-level administrators who hold greater privileges...
CVE-2022-34011
OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery SSRF vulnerability via the parameter entryUrls...
CVE-2022-34013
OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery SSRF vulnerability via the Logo parameter under the Link module...
CVE-2022-34012
Insecure permissions in OneBlog v2.3.4 allows low-level administrators to reset the passwords of high-level administrators who hold greater privileges...
CVE-2022-34011
OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery SSRF vulnerability via the parameter entryUrls...
CVE-2022-34013
OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery SSRF vulnerability via the Logo parameter under the Link module...
CVE-2022-34013
OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery SSRF vulnerability via the Logo parameter under the Link module...
Server side request forgery (ssrf)
OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery SSRF vulnerability via the Logo parameter under the Link module...