563 matches found
CVE-2024-6539
A vulnerability classified as problematic has been found in heyewei SpringBootCMS up to 2024-05-28. Affected is an unknown function of the file /guestbook of the component Guestbook Handler. The manipulation of the argument Content leads to cross site scripting. It is possible to launch the attac...
org.apache.camel.quarkus:camel-quarkus-integration-test-jta (>=3.5.0, <=3.7.0), org.apache.camel.quarkus:camel-quarkus-integration-test-sql (>=3.5.0, <=3.7.0) +7 more potentially affected by CVE-2024-22369 via org.apache.camel:camel-sql (>=4.1.0, <=4.3.0)
org.apache.camel:camel-sql MAVEN version =4.1.0, =3.5.0, =3.5.0, =3.5.0, =3.5.0, =3.5.0, =4.1.0, =9.1.0, =9.1.0, =9.1.0, =10.0.0 Source cves: CVE-2024-22369 Source advisory: MEND:CVE-2024-22369...
CVE-2024-24060
springboot-manager v1.6 is vulnerable to Cross Site Scripting XSS via /sys/user...
CVE-2024-24062
springboot-manager v1.6 is vulnerable to Cross Site Scripting XSS via /sys/role...
CVE-2024-24059
springboot-manager v1.6 is vulnerable to Arbitrary File Upload. The system does not filter the suffixes of uploaded files...
CVE-2024-24060
springboot-manager v1.6 is vulnerable to Cross Site Scripting XSS via /sys/user...
CVE-2024-24061
springboot-manager v1.6 is vulnerable to Cross Site Scripting XSS via /sysContent/add...
CVE-2024-24062
springboot-manager v1.6 is vulnerable to Cross Site Scripting XSS via /sys/role...
CVE-2024-24059
springboot-manager v1.6 is vulnerable to Arbitrary File Upload. The system does not filter the suffixes of uploaded files...
CVE-2024-24061
springboot-manager v1.6 is vulnerable to Cross Site Scripting XSS via /sysContent/add...
Cross site scripting
springboot-manager v1.6 is vulnerable to Cross Site Scripting XSS via /sysContent/add...
Cross site scripting
springboot-manager v1.6 is vulnerable to Cross Site Scripting XSS via /sys/role...
Cross site scripting
springboot-manager v1.6 is vulnerable to Cross Site Scripting XSS via /sys/user...
CVE-2024-24062
CVE-2024-24062 affects springboot-manager v1.6; it is vulnerable to Cross Site Scripting (XSS) via the /sys/role endpoint. This is the explicit vulnerability described in multiple feeds. The NVD/CVE notes an XSS risk with base score 5.4 (Medium). Some sources (e.g., PT-2024-20261) describe the is...
CVE-2024-24061
The CVE-2024-24061 entry affects springboot-manager v1.6 and describes a Cross Site Scripting (XSS) vulnerability exposed via the endpoint /sysContent/add . The root cause in the available documents is not explicitly detailed beyond the XSS finding; the NVD/CVE metrics list a Medium impact (CVSS ...
CVE-2024-24062: Improper Neutralization of Input During Web Page Generation
springboot-manager v1.6 is vulnerable to Cross Site Scripting XSS via /sys/role...
CVE-2024-24061: Improper Neutralization of Input During Web Page Generation
springboot-manager v1.6 is vulnerable to Cross Site Scripting XSS via /sysContent/add...
CVE-2024-24060: Improper Neutralization of Input During Web Page Generation
springboot-manager v1.6 is vulnerable to Cross Site Scripting XSS via /sys/user...
