789 matches found
RuoYi Security Breach
RuoYi is a backend management system for individual developers in China RuoYi RuoYi. A security vulnerability exists in RuoYi v4.7.8, which originates from a cross-site scripting XSS vulnerability found in the component /system/notice/...
CVE-2023-52048
RuoYi v4.7.8 was discovered to contain a cross-site scripting XSS vulnerability via the component /system/notice/...
CVE-2023-52048
RuoYi v4.7.8 contains a cross-site scripting (XSS) vulnerability in the /system/notice/ component (CVE-2023-52048). The CVSS 3.1 base score is 4.7 (Medium) with network access, requiring user interaction; no public exploit details are provided in the documents. Remediation/fix status is not expli...
CVE-2023-52048
RuoYi v4.7.8 was discovered to contain a cross-site scripting XSS vulnerability via the component /system/notice/...
PT-2024-14377 · Ruoyi · Ruoyi
Name of the Vulnerable Software and Affected Versions: RuoYi version 4.7.8 Description: A cross-site scripting XSS issue was found in the /system/notice/ component. This could potentially allow attackers to execute malicious scripts on the affected system. Recommendations: For RuoYi version 4.7.8...
CVE-2023-52048
RuoYi v4.7.8 was discovered to contain a cross-site scripting XSS vulnerability via the component /system/notice/...
CVE-2023-7133
A vulnerability was found in yproject RuoYi 4.7.8. It has been declared as problematic. This vulnerability affects unknown code of the file /login of the component HTTP POST Request Handler. The manipulation of the argument rememberMe with the input falsen3f0malert1p86o0 leads to cross site...
Cross site scripting
A vulnerability was found in yproject RuoYi 4.7.8. It has been declared as problematic. This vulnerability affects unknown code of the file /login of the component HTTP POST Request Handler. The manipulation of the argument rememberMe with the input falsen3f0malert1p86o0 leads to cross site...
CVE-2023-7133 y_project RuoYi HTTP POST Request login cross site scripting
A vulnerability was found in yproject RuoYi 4.7.8. It has been declared as problematic. This vulnerability affects unknown code of the file /login of the component HTTP POST Request Handler. The manipulation of the argument rememberMe with the input falsen3f0malert1p86o0 leads to cross site...
CVE-2023-7133
CVE-2023-7133 affects y_project RuoYi 4.7.8. The vulnerability is a cross-site scripting flaw in the HTTP POST login handler, caused by manipulating the rememberMe parameter with input like falsen3f0mp86o0. Attacker can exploit remotely; the exploit has been disclosed. Root cause centers on impro...
CVE-2023-7133 y_project RuoYi HTTP POST Request login cross site scripting
A vulnerability was found in yproject RuoYi 4.7.8. It has been declared as problematic. This vulnerability affects unknown code of the file /login of the component HTTP POST Request Handler. The manipulation of the argument rememberMe with the input falsen3f0malert1p86o0 leads to cross site...
RuoYi Cross-Site Scripting Vulnerability
RuoYi is a backend management system by the individual developer of RuoYi in China. A cross-site scripting vulnerability exists in RuoYi version 4.7.8, which stems from a reflected cross-site scripting XSS vulnerability in the parameter rememberMe...
GHSA-FG29-37PX-C7WM RuoYi vulnerable to SQL injection vulnerability
RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit...
RuoYi vulnerable to SQL injection vulnerability
RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit...
CVE-2023-49371
RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit...
CVE-2023-49371
RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit...
Sql injection
RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit...
CVE-2023-49371
RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit...
PT-2023-31185 · Ruoyi · Ruoyi
Name of the Vulnerable Software and Affected Versions: RuoYi versions up to v4.6 Description: The issue is a SQL injection vulnerability. It can be exploited via the "/system/dept/edit" API endpoint. Recommendations: For versions up to v4.6, as a temporary workaround, consider restricting access ...