CVE-2026-52348

cool-admin-java 8.0.0 has a SQL injection vulnerability in the order method of CrudOption.java...

CVE-2026-52348

cool-admin-java 8.0.0 has a SQL injection vulnerability in the order method of CrudOption.java...

CVE-2026-52348

cool-admin-java 8.0.0 has a SQL injection vulnerability in the order method of CrudOption.java...

CVE-2026-52348

The software cool-admin-java version 8.0.0 is susceptible to a SQL injection vulnerability within the order() method of the CrudOption.java file. This flaw allows an attacker to execute malicious SQL statements to manipulate the web application's database server. No patched version is currently r...

CVE-2026-52348: Improper Neutralization of Special Elements used in an SQL Command

cool-admin-java 8.0.0 has a SQL injection vulnerability in the order method of CrudOption.java...

CVE-2026-52348

cool-admin-java 8.0.0 has a SQL injection vulnerability in the order method of CrudOption.java...

EUVD-2024-53580

Malicious code in bioql PyPI...

EUVD-2024-53579

Malicious code in bioql PyPI...

CVE-2024-57409

A stored cross-site scripting XSS vulnerability in the Parameter List module of cool-admin-java v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the internet pictures field...

CVE-2024-57408

An arbitrary file upload vulnerability in the component /comm/upload of cool-admin-java v1.0 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-57409

A stored cross-site scripting XSS vulnerability in the Parameter List module of cool-admin-java v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the internet pictures field...

CVE-2024-57408

An arbitrary file upload vulnerability in the component /comm/upload of cool-admin-java v1.0 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-57409

A stored cross-site scripting (XSS) vulnerability exists in the Parameter List module of cool-admin-java v1.0 . Attackers can execute arbitrary web scripts or HTML by injecting a crafted payload into the internet pictures field . To mitigate this risk, it is recommended to disable the Parameter L...

CVE-2024-57408

The backend privilege management framework cool-admin-java v1.0 is affected by an arbitrary file upload vulnerability in the /comm/upload component. An attacker can upload a specially crafted file to achieve arbitrary code execution . To mitigate this risk, it is recommended to disable the /comm/...

cool-admin-java Cross-Site Scripting Vulnerability

cool-admin-java is a backend privilege management framework for COOL individual developers. A cross-site scripting vulnerability exists in cool-admin-java v1.0. An attacker can exploit this vulnerability to execute arbitrary web script or HTML by injecting a specially crafted payload into the...

cool-admin-java code issues and vulnerabilities

cool-admin-java is a backend privilege management framework for COOL individual developers. A code issue vulnerability exists in cool-admin-java v1.0. An attacker can exploit this vulnerability to execute arbitrary code by uploading specially crafted files...

CVE-2024-57408: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the component /comm/upload of cool-admin-java v1.0 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-57409

A stored cross-site scripting XSS vulnerability in the Parameter List module of cool-admin-java v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the internet pictures field...

CVE-2024-57408

An arbitrary file upload vulnerability in the component /comm/upload of cool-admin-java v1.0 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-57409: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the Parameter List module of cool-admin-java v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the internet pictures field...