XSS Vulnerability in JPress v3.3.0

JPress is a WordPress-like product developed in Java. JPress v3.3.0 suffers from an XSS vulnerability that can be exploited by attackers to obtain user cookie information...

SQL Injection Vulnerability in JPress

JPress is a product developed using Java, similar to WordPress. JPress suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

JPress suffers from a SQL injection vulnerability (CNVD-2021-23374)

JPress is a product developed using Java, similar to WordPress. JPress suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

JPress has a logic flaw vulnerability (CNVD-2021-22936)

JPress is a product developed using Java, similar to WordPress. JPress has a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...

JPress has a flawed logic vulnerability

JPress is a product developed using Java, similar to WordPress. JPress has a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...

JPress suffers from an XML entity injection vulnerability

JPress a use of Java development, similar to WordPress products. JPress has an XML entity injection vulnerability that can be exploited by an attacker to read server files...

File Upload Vulnerability in JPress 3.3.0 Backend

JPress a product developed using Java, similar to WordPress. Born to integrate the WeChat ecosystem, simple and easy to get started. Dedicated to creating an autonomous self-owned marketing platform for enterprises, using technology to help enterprises marketing cash. JPress3.3.0 there is a file...

Arbitrary File Read Vulnerability in jpress

JPress a product developed using Java, similar to WordPress. Born to integrate the WeChat ecosystem, simple and easy to get started. Dedicated to creating an autonomous self-owned marketing platform for enterprises, using technology to help enterprises marketing cash. jpress there is an arbitrary...

File upload vulnerability in jpress

JPress is a product developed in Java, similar to WordPress. Incorporating the microsoft ecosystem, the jpress has a file upload vulnerability that can be exploited by attackers to gain access to the web server...

JPress Cross-Site Scripting Vulnerability (CNVD-2019-01670)

JPress is a set of blogging platform developed using the Java language. A cross-site scripting vulnerability exists in JPress version 1.0.4, which can be exploited by remote attackers to inject arbitrary web script or HTML with the help of Markdown input...

CVE-2019-6278

XSS exists in JPress v1.0.4 via Markdown input, or Markdown input with the code input option...

CVE-2019-6278

XSS exists in JPress v1.0.4 via Markdown input, or Markdown input with the code input option...

CVE-2019-6278

XSS exists in JPress v1.0.4 via Markdown input, or Markdown input with the code input option...

CVE-2019-6278

CVE-2019-6278 is an XSS vulnerability in JPress v1.0.4 exploitable via Markdown input (and Markdown input with the code input option). Affected component: JPress Markdown processing. Root cause and exact exploit vector are not detailed across the provided documents beyond the XSS claim. Several s...

JPress Cross-Site Scripting Vulnerability

JPress is a set of blogging platform developed using the Java language. A cross-site scripting vulnerability exists in JPress version 1.0-rc.5, which can be exploited to inject arbitrary web script or HTML by sending the site name, site title, or site subtitle fields to the...

CVE-2018-19170

In JPress v1.0-rc.5, there is stored XSS via each of the first three input fields to the starter-tomcat-1.0/admin/setting URI, as demonstrated by the webname parameter...

Cross site scripting

In JPress v1.0-rc.5, there is stored XSS via each of the first three input fields to the starter-tomcat-1.0/admin/setting URI, as demonstrated by the webname parameter...

CVE-2018-19170

In JPress v1.0-rc.5, there is stored XSS via each of the first three input fields to the starter-tomcat-1.0/admin/setting URI, as demonstrated by the webname parameter...

CVE-2018-19170

CVE-2018-19170 affects JPress v1.0-rc.5. It is a stored XSS in the starter-tomcat-1.0/admin/setting URI, exploitable via the web_name parameter in the first three input fields. NVD reports CVSS v2 base score 3.5 (LOW) and CVSS v3 base score 4.8 (MEDIUM); attack vector is NETWORK with user interac...

CVE-2018-19170

In JPress v1.0-rc.5, there is stored XSS via each of the first three input fields to the starter-tomcat-1.0/admin/setting URI, as demonstrated by the webname parameter...