331 matches found
CVE-2023-3276: Improper Restriction of XML External Entity Reference
A vulnerability, which was classified as problematic, has been found in Dromara HuTool up to 5.8.19. Affected by this issue is the function readBySax of the file XmlUtil.java of the component XML Parsing Module. The manipulation leads to xml external entity reference. The exploit has been disclos...
CVE-2023-2476
A vulnerability was found in Dromara J2eeFAST up to 2.6.0. It has been classified as problematic. Affected is an unknown function of the component Announcement Handler. The manipulation of the argument 系统工具/公告管理 leads to cross site scripting. It is possible to launch the attack remotely. The...
Cross site scripting
A vulnerability was found in Dromara J2eeFAST up to 2.6.0. It has been classified as problematic. Affected is an unknown function of the component Announcement Handler. The manipulation of the argument ????/???? leads to cross site scripting. It is possible to launch the attack remotely. The...
CVE-2023-2476
A vulnerability was found in Dromara J2eeFAST up to 2.6.0. It has been classified as problematic. Affected is an unknown function of the component Announcement Handler. The manipulation of the argument 系统工具/公告管理 leads to cross site scripting. It is possible to launch the attack remotely. The...
CVE-2023-2476
CVE-2023-2476 affects Dromara J2eeFAST up to 2.6.0, specifically the Announcement Handler. The vulnerability arises from manipulating the argument 系统工具/公告管理, enabling remote cross-site scripting. Exploit appears to be publicly disclosed. Patch named 7a9e1a00e3329fdc0ae05f7a8257cce77037134d should...
CVE-2023-2476 Dromara J2eeFAST Announcement cross site scripting
A vulnerability was found in Dromara J2eeFAST up to 2.6.0. It has been classified as problematic. Affected is an unknown function of the component Announcement Handler. The manipulation of the argument 系统工具/公告管理 leads to cross site scripting. It is possible to launch the attack remotely. The...
CVE-2023-2475
A vulnerability was found in Dromara J2eeFAST up to 2.6.0 and classified as problematic. This issue affects some unknown processing of the component System Message Handler. The manipulation of the argument 主题 leads to cross site scripting. The attack may be initiated remotely. The exploit has bee...
CVE-2023-2475
A vulnerability was found in Dromara J2eeFAST up to 2.6.0 and classified as problematic. This issue affects some unknown processing of the component System Message Handler. The manipulation of the argument 主题 leads to cross site scripting. The attack may be initiated remotely. The exploit has bee...
Cross site scripting
A vulnerability was found in Dromara J2eeFAST up to 2.6.0 and classified as problematic. This issue affects some unknown processing of the component System Message Handler. The manipulation of the argument ?? leads to cross site scripting. The attack may be initiated remotely. The exploit has bee...
CVE-2023-2475
A vulnerability was found in Dromara J2eeFAST up to 2.6.0 and classified as problematic. This issue affects some unknown processing of the component System Message Handler. The manipulation of the argument 主题 leads to cross site scripting. The attack may be initiated remotely. The exploit has bee...
CVE-2023-2475 Dromara J2eeFAST System Message cross site scripting
A vulnerability was found in Dromara J2eeFAST up to 2.6.0 and classified as problematic. This issue affects some unknown processing of the component System Message Handler. The manipulation of the argument 主题 leads to cross site scripting. The attack may be initiated remotely. The exploit has bee...
CVE-2023-2475 Dromara J2eeFAST System Message cross site scripting
A vulnerability was found in Dromara J2eeFAST up to 2.6.0 and classified as problematic. This issue affects some unknown processing of the component System Message Handler. The manipulation of the argument 主题 leads to cross site scripting. The attack may be initiated remotely. The exploit has bee...
CVE-2023-2475
Dromara J2eeFAST (up to version 2.6.0) vulnerability in the System Message Handler allows cross-site scripting via manipulation of the argument 主题. Root cause is unknown processing in the System Message Handler, enabling remote exploitation. The CVE entry notes the exploit has been disclosed publ...
CVE-2023-2476: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Dromara J2eeFAST up to 2.6.0. It has been classified as problematic. Affected is an unknown function of the component Announcement Handler. The manipulation of the argument 系统工具/公告管理 leads to cross site scripting. It is possible to launch the attack remotely. The...
PT-2023-19767 · Dromara · Dromara J2Eefast
Name of the Vulnerable Software and Affected Versions: Dromara J2eeFAST versions up to 2.6.0 Description: A problematic issue was found in the Announcement Handler component. The manipulation of the argument 系统工具/公告管理 or ????/???? leads to cross site scripting. It is possible to launch the attack...
J2eeFAST 跨站脚本漏洞
J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free backend framework platform . A cross-site scripting vulnerability exists in Dromara J2eeFAST version 2.6.0 and earlier versions. An attacker can exploit th...
PT-2023-19766 · Dromara · Dromara J2Eefast
Name of the Vulnerable Software and Affected Versions: Dromara J2eeFAST versions up to 2.6.0 Description: A problematic issue affects the System Message Handler component, where the manipulation of the argument 主题 or ?? leads to cross-site scripting. The attack can be initiated remotely...
CVE-2023-2475: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Dromara J2eeFAST up to 2.6.0 and classified as problematic. This issue affects some unknown processing of the component System Message Handler. The manipulation of the argument 主题 leads to cross site scripting. The attack may be initiated remotely. The exploit has bee...
Dromara Hutool Deserialization of Untrusted Data vulnerability
Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter...