PT-2025-17232 · Twonav · Twonav

Name of the Vulnerable Software and Affected Versions: twonav version 2.1.18-20241105 Description: The issue allows a remote attacker to obtain sensitive information via the site settings component. Recommendations: For twonav version 2.1.18-20241105, consider restricting access to the site...

CVE-2024-34453

TwoNav 2.1.13 contains an SSRF vulnerability via the url paramater to index.php?c=api&method=readdata&type=connectivitytest which reaches /system/api.php...

CVE-2024-34453

TwoNav 2.1.13 contains an SSRF vulnerability via the url paramater to index.php?c=api&method=readdata&type=connectivitytest which reaches /system/api.php...

TwoNav 安全漏洞

TwoNav is an open source and free bookmark navigation management program from tznb1 open source. A security vulnerability exists in TwoNav version 2.1.13, which stems from a server-side request forgery vulnerability in the url parameter...

CVE-2024-34453

TwoNav 2.1.13 contains an SSRF vulnerability via the url paramater to index.php?c=api&method=readdata&type=connectivitytest which reaches /system/api.php...

CVE-2024-34453

TwoNav version 2.1.13 is affected by an SSRF vulnerability that can be exploited via the url parameter in index.php?c=api&method=read_data&type=connectivity_test, which reaches /system/api.php. Root cause is an SSRF in the API endpoint, with CVSSv3.1 base score 4.3 (Medium) and network attack vec...

CVE-2024-34453

TwoNav 2.1.13 contains an SSRF vulnerability via the url paramater to index.php?c=api&method=readdata&type=connectivitytest which reaches /system/api.php...

CVE-2023-37657

TwoNav v2.0.28-20230624 is vulnerable to Cross Site Scripting XSS...

CVE-2023-37657

TwoNav v2.0.28-20230624 is vulnerable to Cross Site Scripting XSS...

CVE-2023-37657

TwoNav v2.0.28-20230624 is vulnerable to Cross Site Scripting XSS...

Cross site scripting

TwoNav v2.0.28-20230624 is vulnerable to Cross Site Scripting XSS...

PT-2023-26062 · Twonav · Twonav

Name of the Vulnerable Software and Affected Versions: TwoNav version 2.0.28-20230624 Description: The issue is related to Cross Site Scripting XSS. Recommendations: For version 2.0.28-20230624, consider disabling any features that may facilitate XSS attacks until a patch is available. Restrict...

TwoNav 跨站脚本漏洞

TwoNav is an open source and free bookmark navigation management program by tznb1 open source. A cross-site scripting vulnerability exists in TwoNav version v2.0.28-20230624, which stems from a default setting that allows free registration, resulting in stored XSS...

CVE-2023-37657

TwoNav v2.0.28-20230624 is vulnerable to Cross Site Scripting XSS...

CVE-2023-37657

TwoNav v2.0.28-20230624 is vulnerable to Cross Site Scripting XSS...

CVE-2023-37657

TwoNav v2.0.28-20230624 is vulnerable to Cross Site Scripting (XSS) as CVE-2023-37657. The connected sources confirm the product/version affected and the XSS class, but do not provide a technical root cause or specific vulnerable component. No patch/version with fix is disclosed in the supplied d...