Cross site scripting

SENS v1.0 is vulnerable to Cross Site Scripting XSS...

Cross site scripting

SENS v1.0 is vulnerable to Cross Site Scripting XSS via com.liuyanzhao.sens.web.controller.admin, getRegister...

Improper access control

SENS v1.0 is vulnerable to Incorrect Access Control vulnerability...

Privilege escalation

SENS v1.0 has a file upload vulnerability...

SENS 安全漏洞

SENS is an enterprise level blogging system by saysky individual developer. A security vulnerability exists in SENS v1.0, which stems from the presence of an incorrect access control vulnerability...

CVE-2022-45756

SENS v1.0 is vulnerable to Cross Site Scripting XSS...

CVE-2022-45756

CVE-2022-45756 affects SENS v1.0 and is described as vulnerable to Cross-Site Scripting (XSS). Connected sources do not provide detailed root-cause, affected components beyond the SENS v1.0 label, or concrete remediation steps. At least one source notes no information about a fix for SENS v1.0. T...

CVE-2022-45759

The CVE-2022-45759 entry concerns SENS v1.0 with a file upload vulnerability in the web application’s upload functionality. Affected software: SENS version 1.0. The CVSS 3.1 base score is 8.8 (HIGH), with network attack vector, low attack complexity, no privileges required, and user interaction r...

SENS 跨站脚本漏洞

SENS is an enterprise blogging system by saysky individual developer. A cross-site scripting vulnerability exists in SENS v1.0, which stems from vulnerability to cross-site scripting XSS attacks...

SENS 跨站脚本漏洞

SENS is an enterprise blog system by saysky individual developer. A cross-site scripting vulnerability exists in SENS v1.0, which originates from a cross-site scripting attack XSS on com.liuyanzhao.sens.web.controller.admin, getRegister...

CVE-2022-45758

SENS v1.0 is vulnerable to Cross Site Scripting XSS via com.liuyanzhao.sens.web.controller.admin, getRegister...

CVE-2022-45760

SENS v1.0 is vulnerable to Incorrect Access Control vulnerability...

SENS 代码问题漏洞

SENS is an enterprise blog system by saysky individual developer. A code issue vulnerability exists in SENS v1.0, which stems from the presence of a file upload vulnerability...

CVE-2022-45759

SENS v1.0 has a file upload vulnerability...

CVE-2022-45759

SENS v1.0 has a file upload vulnerability...

CVE-2022-45756

SENS v1.0 is vulnerable to Cross Site Scripting XSS...

CVE-2022-45760

Affected software : SENS v1.0. Vulnerability : Incorrect Access Control, potentially allowing unauthorized access to data or privileged functions. Root cause described in connected sources as improper access control. Versions affected : SENS 1.0. Exploitation : not described in the provided docum...

CVE-2022-45760

SENS v1.0 is vulnerable to Incorrect Access Control vulnerability...

CVE-2022-45758

SENS v1.0 is vulnerable to Cross Site Scripting XSS via com.liuyanzhao.sens.web.controller.admin, getRegister...

CVE-2022-45758

CVE-2022-45758 affects SENS v1.0, where the Cross Site Scripting (XSS) vulnerability exists in the admin controller’s getRegister function (com.liuyanzhao.sens.web.controller.admin). The issue is documented across multiple feeds and lists SENS v1.0 as vulnerable to XSS, with CVSSv3.1 base score 5...