Lucene search
K

12 matches found

OSV
OSV
added 2025/05/10 1:15 a.m.2 views

CVE-2025-4495

A vulnerability has been found in JAdmin-JAVA JAdmin 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /memoAjax/save. The manipulation of the argument ID leads to cross site scripting. The attack can be launched remotely. The exploit has be...

5.4CVSS3.7AI score0.00162EPSS
Exploits1References5
CVE
CVE
added 2025/05/10 1:0 a.m.55 views

CVE-2025-4495

CVE-2025-4495 affects JAdmin-JAVA JAdmin 1.0. The vulnerability lies in the /memoAjax/save endpoint where manipulating the ID parameter enables cross-site scripting. Descriptions across multiple sources indicate the attack can be launched remotely and that the exploit has been disclosed publicly....

5.4CVSS3.8AI score0.00162EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/10 1:0 a.m.14 views

CVE-2025-4495 JAdmin-JAVA JAdmin save cross site scripting

A vulnerability has been found in JAdmin-JAVA JAdmin 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /memoAjax/save. The manipulation of the argument ID leads to cross site scripting. The attack can be launched remotely. The exploit has be...

5.1CVSS6.5AI score0.00162EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/05/10 1:0 a.m.22 views

CVE-2025-4495 JAdmin-JAVA JAdmin save cross site scripting

A vulnerability has been found in JAdmin-JAVA JAdmin 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /memoAjax/save. The manipulation of the argument ID leads to cross site scripting. The attack can be launched remotely. The exploit has be...

5.1CVSS0.00162EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/05/10 12:0 a.m.2 views

JAdmin 代码注入漏洞

JAdmin is JAdmin-JAVA open source a Java language based rapid development platform . JAdmin 1.0 version of the code injection vulnerability , the vulnerability stems from the file / memoAjax / save in the parameter ID operation leads to cross-site scripting...

5.4CVSS4.8AI score0.00162EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/05/10 12:0 a.m.4 views

PT-2025-20605 · Unknown · Jadmin-Java

Name of the Vulnerable Software and Affected Versions: JAdmin-JAVA JAdmin version 1.0 Description: A vulnerability has been found in JAdmin-JAVA, affecting an unknown functionality of the file "/memoAjax/save". The manipulation of the ID argument leads to cross-site scripting. The attack can be...

5.1CVSS3.6AI score0.00162EPSS
Exploits1References10
OSV
OSV
added 2025/05/09 10:15 p.m.3 views

CVE-2025-4494

A vulnerability, which was classified as critical, was found in JAdmin-JAVA JAdmin 1.0. Affected is the function toLogin of the file NoNeedLoginController.java of the component Admin Backend. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

9.8CVSS5.3AI score0.00803EPSS
Exploits1References5
CVE
CVE
added 2025/05/09 9:31 p.m.46 views

CVE-2025-4494

CVE-2025-4494 affects JAdmin-JAVA JAdmin 1.0, specifically the toLogin function in NoNeedLoginController.java within Admin Backend. The vulnerability enables improper authentication and can be exploited remotely; public exploits have been disclosed. Connected sources corroborate the issue and des...

9.8CVSS7AI score0.00803EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/09 9:31 p.m.6 views

CVE-2025-4494 JAdmin-JAVA JAdmin Admin Backend NoNeedLoginController.java toLogin improper authentication

A vulnerability, which was classified as critical, was found in JAdmin-JAVA JAdmin 1.0. Affected is the function toLogin of the file NoNeedLoginController.java of the component Admin Backend. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

7.5CVSS7.2AI score0.00803EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/05/09 9:31 p.m.22 views

CVE-2025-4494 JAdmin-JAVA JAdmin Admin Backend NoNeedLoginController.java toLogin improper authentication

A vulnerability, which was classified as critical, was found in JAdmin-JAVA JAdmin 1.0. Affected is the function toLogin of the file NoNeedLoginController.java of the component Admin Backend. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

7.5CVSS0.00803EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/05/09 12:0 a.m.2 views

PT-2025-20601 · Unknown · Jadmin-Java

Name of the Vulnerable Software and Affected Versions: JAdmin-JAVA JAdmin version 1.0 Description: A critical vulnerability was found in the function toLogin of the file NoNeedLoginController.java of the component Admin Backend. The manipulation leads to improper authentication. It is possible to...

7.5CVSS7.1AI score0.00803EPSS
Exploits1References11
CNNVD
CNNVD
added 2025/05/09 12:0 a.m.2 views

JAdmin 授权问题漏洞

JAdmin is JAdmin-JAVA open source a Java language based rapid development platform. JAdmin 1.0 version of the authorization problem vulnerability, the vulnerability stems from the file NoNeedLoginController.java in the Admin Backend component of the toLogin function has improper authentication...

9.8CVSS7.5AI score0.00803EPSS
Exploits1References2
Rows per page
Query Builder