CVE-2025-4551

A vulnerability, which was classified as problematic, was found in ContiNew Admin up to 3.6.0. Affected is an unknown function of the file /dev-api/common/file. The manipulation of the argument File leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-4551 ContiNew Admin file cross site scripting

A vulnerability, which was classified as problematic, was found in ContiNew Admin up to 3.6.0. Affected is an unknown function of the file /dev-api/common/file. The manipulation of the argument File leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-4551 ContiNew Admin file cross site scripting

A vulnerability, which was classified as problematic, was found in ContiNew Admin up to 3.6.0. Affected is an unknown function of the file /dev-api/common/file. The manipulation of the argument File leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-4551 ContiNew Admin file cross site scripting

A vulnerability, which was classified as problematic, was found in ContiNew Admin up to 3.6.0. Affected is an unknown function of the file /dev-api/common/file. The manipulation of the argument File leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-4551

CVE-2025-4551 affects ContiNew Admin up to version 3.6.0. The vulnerability lies in the /dev-api/common/file endpoint where manipulating the File argument enables cross-site scripting. It can be exploited remotely and the exploit has been disclosed publicly. Multiple sources confirm the issue but...

ContiNew Admin 代码注入漏洞

ContiNew Admin is ContiNew open source a continuous iterative optimization of front-end and back-end separation of middle and back-end management system framework. A code injection vulnerability exists in ContiNew Admin 3.6.0 and earlier versions, which stems from cross-site scripting due to...

PT-2025-20674 · Unknown · Continew Admin

Name of the Vulnerable Software and Affected Versions: ContiNew Admin versions up to 3.6.0 Description: A vulnerability has been found in ContiNew Admin, allowing for unverified password change. The issue affects an unknown functionality of the file "/dev-api/system/user/1/password". This can be...

PT-2025-20673 · Unknown · Continew Admin

Name of the Vulnerable Software and Affected Versions: ContiNew Admin versions up to 3.6.0 Description: A problematic issue was found in ContiNew Admin, affecting an unknown function of the file /dev-api/common/file. The manipulation of the File argument leads to cross-site scripting. It is...

CVE-2025-4551: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in ContiNew Admin up to 3.6.0. Affected is an unknown function of the file /dev-api/common/file. The manipulation of the argument File leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

ContiNew Admin 安全漏洞

ContiNew Admin is ContiNew open source a continuous iterative optimization of front-end and back-end separation of the middle and back-end management system framework. A security vulnerability exists in ContiNew Admin 3.6.0 and earlier versions, which stems from an unauthenticated password change...

CVE-2024-8155

A vulnerability classified as critical was found in ContiNew Admin 3.2.0. Affected by this vulnerability is the function top.continew.starter.extension.crud.controller.BaseControllertree of the file /api/system/dept/tree?sort=parentId%2Casc&sort=sort%2Casc. The manipulation of the argument sort...

CVE-2024-8155

A vulnerability classified as critical was found in ContiNew Admin 3.2.0. Affected by this vulnerability is the function top.continew.starter.extension.crud.controller.BaseControllertree of the file /api/system/dept/tree?sort=parentId%2Casc&sort=sort%2Casc. The manipulation of the argument sort...

CVE-2024-8155

CVE-2024-8155 affects ContiNew Admin 3.2.0. The vulnerability resides in the function top.continew.starter.extension.crud.controller.BaseController#tree used by the endpoint /api/system/dept/tree?sort=parentId,asc&sort=sort,asc . Manipulating the sort argument leads to SQL injection, with remote ...

CVE-2024-8155 ContiNew Admin tree sql injection

A vulnerability classified as critical was found in ContiNew Admin 3.2.0. Affected by this vulnerability is the function top.continew.starter.extension.crud.controller.BaseControllertree of the file /api/system/dept/tree?sort=parentId%2Casc&sort=sort%2Casc. The manipulation of the argument sort...

CVE-2024-8155 ContiNew Admin tree sql injection

A vulnerability classified as critical was found in ContiNew Admin 3.2.0. Affected by this vulnerability is the function top.continew.starter.extension.crud.controller.BaseControllertree of the file /api/system/dept/tree?sort=parentId%2Casc&sort=sort%2Casc. The manipulation of the argument sort...

CVE-2024-8150

A vulnerability was found in ContiNew Admin 3.2.0 and classified as critical. Affected by this issue is the function top.continew.starter.extension.crud.controller.BaseControllerpage of the file /api/system/user?deptId=1&page=1&size=10. The manipulation of the argument sort leads to sql injection...

CVE-2024-8150

CVE-2024-8150 affects ContiNew Admin 3.2.0. The vulnerability is in top.continew.starter.extension.crud.controller.BaseController#page for /api/system/user?deptId=1&page=1&size=10, where improper handling of the sort parameter enables SQL injection. The issue may be exploitable remotely. Vendor r...

CVE-2024-8150 ContiNew Admin user sql injection

A vulnerability was found in ContiNew Admin 3.2.0 and classified as critical. Affected by this issue is the function top.continew.starter.extension.crud.controller.BaseControllerpage of the file /api/system/user?deptId=1&page=1&size=10. The manipulation of the argument sort leads to sql injection...

CVE-2024-8150 ContiNew Admin user sql injection

A vulnerability was found in ContiNew Admin 3.2.0 and classified as critical. Affected by this issue is the function top.continew.starter.extension.crud.controller.BaseControllerpage of the file /api/system/user?deptId=1&page=1&size=10. The manipulation of the argument sort leads to sql injection...

CVE-2024-8150 ContiNew Admin user sql injection

A vulnerability was found in ContiNew Admin 3.2.0 and classified as critical. Affected by this issue is the function top.continew.starter.extension.crud.controller.BaseControllerpage of the file /api/system/user?deptId=1&page=1&size=10. The manipulation of the argument sort leads to sql injection...