25 matches found
CVE-2026-52348
cool-admin-java 8.0.0 has a SQL injection vulnerability in the order method of CrudOption.java...
CVE-2026-52348
cool-admin-java 8.0.0 has a SQL injection vulnerability in the order method of CrudOption.java...
CVE-2026-52348
The software cool-admin-java version 8.0.0 is susceptible to a SQL injection vulnerability within the order() method of the CrudOption.java file. This flaw allows an attacker to execute malicious SQL statements to manipulate the web application's database server. No patched version is currently r...
CVE-2026-52348
cool-admin-java 8.0.0 has a SQL injection vulnerability in the order method of CrudOption.java...
CVE-2026-52348
cool-admin-java 8.0.0 has a SQL injection vulnerability in the order method of CrudOption.java...
CVE-2026-52348
cool-admin-java 8.0.0 has a SQL injection vulnerability in the order method of CrudOption.java...
CVE-2026-52348: Improper Neutralization of Special Elements used in an SQL Command
cool-admin-java 8.0.0 has a SQL injection vulnerability in the order method of CrudOption.java...
EUVD-2024-53579
Malicious code in bioql PyPI...
EUVD-2024-53580
Malicious code in bioql PyPI...
CVE-2024-57409
A stored cross-site scripting XSS vulnerability in the Parameter List module of cool-admin-java v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the internet pictures field...
CVE-2024-57408
An arbitrary file upload vulnerability in the component /comm/upload of cool-admin-java v1.0 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-57408
An arbitrary file upload vulnerability in the component /comm/upload of cool-admin-java v1.0 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-57409
A stored cross-site scripting XSS vulnerability in the Parameter List module of cool-admin-java v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the internet pictures field...
CVE-2024-57409
A stored cross-site scripting XSS vulnerability in the Parameter List module of cool-admin-java v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the internet pictures field...
CVE-2024-57408
An arbitrary file upload vulnerability in the component /comm/upload of cool-admin-java v1.0 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-57409
A stored cross-site scripting XSS vulnerability in the Parameter List module of cool-admin-java v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the internet pictures field...
CVE-2024-57408
An arbitrary file upload vulnerability in the component /comm/upload of cool-admin-java v1.0 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-57409: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in the Parameter List module of cool-admin-java v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the internet pictures field...
CVE-2024-57408: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the component /comm/upload of cool-admin-java v1.0 allows attackers to execute arbitrary code via uploading a crafted file...
PT-2025-6076
Name of the Vulnerable Software and Affected Versions cool-admin-java version v1.0 Description A stored cross-site scripting XSS vulnerability in the Parameter List module of cool-admin-java allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the interne...