CVE-2026-124506

A cross-site scripting (XSS) vulnerability exists in Dianping CAT versions 3.0.0/3.1.0/4.0-RC1 . The flaw is located in the Report Handler component, specifically within the Model.getDomain function of the file WEB-INF/tags/hourlyReport.tag. Attackers can trigger the vulnerability by manipulating...

CVE-2026-124506 Dianping CAT Report hourlyReport.tag Model.getDomain cross site scripting

A vulnerability has been found in Dianping CAT 3.0.0/3.1.0/4.0-RC1. This vulnerability affects the function Model.getDomain of the file WEB-INF/tags/hourlyReport.tag of the component Report Handler. The manipulation of the argument domain leads to cross site scripting. It is possible to initiate...

EUVD-2026-119767

A vulnerability has been found in Dianping CAT 3.0.0/3.1.0/4.0-RC1. This vulnerability affects the function Model.getDomain of the file WEB-INF/tags/hourlyReport.tag of the component Report Handler. The manipulation of the argument domain leads to cross site scripting. It is possible to initiate...

EUVD-2026-119761

A flaw has been found in Dianping CAT 3.0.0/3.1.0/4.0-RC1. This affects the function Handler.redirect of the file Handler.java of the component Login/Logout. Executing a manipulation of the argument rtnUrl can lead to open redirect. The attack may be performed from remote. The exploit has been...

CVE-2026-124505

A flaw in Dianping CAT versions 3.0.0/3.1.0/4.0-RC1 allows for an open redirect vulnerability. The issue resides in the Handler.redirect function within the Handler.java file of the Login/Logout component. By manipulating the rtnUrl argument, a remote attacker can redirect users to an unintended ...

CVE-2026-124506: Dianping CAT: A vulnerability has been found in Dianping CAT 3.0.0/3.1.0/4.0-RC1

A vulnerability has been found in Dianping CAT 3.0.0/3.1.0/4.0-RC1. This vulnerability affects the function Model.getDomain of the file WEB-INF/tags/hourlyReport.tag of the component Report Handler. The manipulation of the argument domain leads to cross site scripting. It is possible to initiate...

CVE-2026-124505: Dianping CAT: A flaw has been found in Dianping CAT 3.0.0/3.1.0/4.0-RC1

A flaw has been found in Dianping CAT 3.0.0/3.1.0/4.0-RC1. This affects the function Handler.redirect of the file Handler.java of the component Login/Logout. Executing a manipulation of the argument rtnUrl can lead to open redirect. The attack may be performed from remote. The exploit has been...

qibocms地方门户系统注入（多处类似,demo测试)

简要描述： 初始化啊 初始化。 详细说明： 很多类似的 随便找个地方把。 首先注册个会员。 在dianping/post.php中 if$action=="postnew" if$webdbForbidPostMore if$db-getone"SELECT FROM $precontent WHERE uid='$lfjuid' LIMIT 1" showerr"系统设置每人只能发布一个商铺!"; if!checkrandnum$POST"$webdbrandnuminputname" showerr"系统随机码失效,请返回,刷新一下页面,再重新输入数据,重新提交!";...

phpcms 9.2.7 phpcms/modules/dianping/index.php SQL注入漏洞

0x01 漏洞背景 phpcms 9.2.7 的phpcms/modules/dianping/index.php处存在SQL注入漏洞。 受影响版本：PHPCMS V9 - GBK 漏洞文件：/phpcms/modules/dianping/index.php 漏洞函数： init 未过滤参数：$contentid = $GET'contentid'; 0x02 漏洞分析 先看代码： 可以很清楚看到$contentid没有过虑，gbk下运用宽字符应该可以注入的。 0x03 修复方案 对参数$contentid进行过滤。...