Lucene search
K

12 matches found

RedhatCVE
RedhatCVE
added 2026/01/07 9:15 a.m.6 views

CVE-2024-2568

A vulnerability has been found in heyewei JFinalCMS 5.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/divdata/delete?divId=9 of the component Custom Data Page. The manipulation leads to sql injection. The attack can be launched remotel...

7.2CVSS7.4AI score0.00313EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-27517

Malicious code in bioql PyPI...

7.2CVSS5AI score0.00313EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-47614

Malicious code in bioql PyPI...

5.3CVSS4.8AI score0.00111EPSS
Exploits1References3
NVD
NVD
added 2024/07/07 11:15 p.m.12 views

CVE-2024-6539

A vulnerability classified as problematic has been found in heyewei SpringBootCMS up to 2024-05-28. Affected is an unknown function of the file /guestbook of the component Guestbook Handler. The manipulation of the argument Content leads to cross site scripting. It is possible to launch the attac...

5.3CVSS0.00111EPSS
Exploits1References3
Cvelist
Cvelist
added 2024/07/07 10:31 p.m.19 views

CVE-2024-6539 heyewei SpringBootCMS Guestbook guestbook cross site scripting

A vulnerability classified as problematic has been found in heyewei SpringBootCMS up to 2024-05-28. Affected is an unknown function of the file /guestbook of the component Guestbook Handler. The manipulation of the argument Content leads to cross site scripting. It is possible to launch the attac...

5.3CVSS0.00111EPSS
Exploits1References3
CVE
CVE
added 2024/07/07 10:31 p.m.48 views

CVE-2024-6539

CVE-2024-6539 – heyewei SpringBootCMS vulnerability affecting the Guestbook Handler component, specifically an unknown function of the file /guestbook. The manipulation of the Content parameter leads to cross-site scripting and can be exploited remotely. Public disclosure of exploits is indicated...

5.3CVSS3.9AI score0.00111EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/07/07 10:31 p.m.10 views

CVE-2024-6539 heyewei SpringBootCMS Guestbook guestbook cross site scripting

A vulnerability classified as problematic has been found in heyewei SpringBootCMS up to 2024-05-28. Affected is an unknown function of the file /guestbook of the component Guestbook Handler. The manipulation of the argument Content leads to cross site scripting. It is possible to launch the attac...

5.3CVSS6.2AI score0.00111EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2024/07/07 12:0 a.m.2 views

PT-2024-37699 · Unknown · Heyewei Springbootcms

Name of the Vulnerable Software and Affected Versions: heyewei SpringBootCMS up to 2024-05-28 Description: A vulnerability has been found in the Guestbook Handler component of heyewei SpringBootCMS, affecting an unknown function of the file /guestbook. The manipulation of the Content argument lea...

5.3CVSS6.7AI score0.00111EPSS
Exploits1References9
NVD
NVD
added 2024/03/17 11:15 p.m.11 views

CVE-2024-2568

A vulnerability has been found in heyewei JFinalCMS 5.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/divdata/delete?divId=9 of the component Custom Data Page. The manipulation leads to sql injection. The attack can be launched remotel...

7.2CVSS5.2AI score0.00313EPSS
Exploits1References3
OSV
OSV
added 2024/03/17 11:15 p.m.1 views

CVE-2024-2568

A vulnerability has been found in heyewei JFinalCMS 5.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/divdata/delete?divId=9 of the component Custom Data Page. The manipulation leads to sql injection. The attack can be launched remotel...

7.2CVSS5.6AI score
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/03/17 11:0 p.m.15 views

CVE-2024-2568 heyewei JFinalCMS Custom Data Page sql injection

A vulnerability has been found in heyewei JFinalCMS 5.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/divdata/delete?divId=9 of the component Custom Data Page. The manipulation leads to sql injection. The attack can be launched remotel...

5.8CVSS7.3AI score0.00313EPSS
Exploits1References3
CVE
CVE
added 2024/03/17 11:0 p.m.72 views

CVE-2024-2568

CVE-2024-2568 affects heyewei JFinalCMS 5.0.0, specifically the Custom Data Page’s file /admin/div_data/delete?divId=9. The issue is a SQL injection caused by lack of validation of externally supplied SQL, allowing remote exploitation. Multiple connected reports confirm the vulnerability and publ...

7.2CVSS5.2AI score0.00313EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder