CVE-2024-57409

A stored cross-site scripting XSS vulnerability in the Parameter List module of cool-admin-java v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the internet pictures field...

CVE-2024-57408

The backend privilege management framework cool-admin-java v1.0 is affected by an arbitrary file upload vulnerability in the /comm/upload component. An attacker can upload a specially crafted file to achieve arbitrary code execution . To mitigate this risk, it is recommended to disable the /comm/...

CVE-2024-57409: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the Parameter List module of cool-admin-java v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the internet pictures field...

PT-2025-6075

Name of the Vulnerable Software and Affected Versions cool-admin-java version 1.0 Description An arbitrary file upload vulnerability in the component /comm/upload allows attackers to execute arbitrary code via uploading a crafted file. This issue enables attackers to upload malicious files,...