451 matches found
CVE-2025-3856 xxyopen Novel-Plus searchByPage sql injection
A vulnerability was found in xxyopen Novel-Plus 5.1.0. It has been classified as critical. This affects the function searchByPage of the file /book/searchByPage. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
PT-2025-17478 · Unknown · Xxyopen Novel-Plus
Name of the Vulnerable Software and Affected Versions: xxyopen Novel-Plus version 5.1.0 Description: A critical issue affects the searchByPage function of the /book/searchByPage file. The manipulation of the sort argument leads to SQL injection. It is possible to initiate the attack remotely. The...
Novel-Plus 注入漏洞
Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. An injection vulnerability exists in Novel-Plus version 5.1.0, which stems from the improper handling of the parameter sort by the function searchByPage in the file /book/searchByPage, resulting in SQL injection...
CVE-2025-3676
A vulnerability classified as critical has been found in xxyopen Novel-Plus 3.5.0. This affects an unknown part of the file /api/front/search/books. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
CVE-2025-3676 xxyopen Novel-Plus books sql injection
A vulnerability classified as critical has been found in xxyopen Novel-Plus 3.5.0. This affects an unknown part of the file /api/front/search/books. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
CVE-2025-3676
CVE-2025-3676 affects xxyopen Novel-Plus 3.5.0. The issue is an SQL injection in the /api/front/search/books endpoint caused by improper handling of the sort parameter, enabling remote exploitation. Public exploit/disclosure is noted and vendor response was absent. Mitigation guidance from PT Sec...
CVE-2025-3676 xxyopen Novel-Plus books sql injection
A vulnerability classified as critical has been found in xxyopen Novel-Plus 3.5.0. This affects an unknown part of the file /api/front/search/books. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
CVE-2025-3676 xxyopen Novel-Plus books sql injection
A vulnerability classified as critical has been found in xxyopen Novel-Plus 3.5.0. This affects an unknown part of the file /api/front/search/books. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
Novel-Plus 注入漏洞
Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. An injection vulnerability exists in Novel-Plus version 3.5.0, which stems from improper manipulation of the sort parameter in the /api/front/search/books file, which could lead to an SQL injection attack...
PT-2025-16569 · Unknown · Xxyopen Novel-Plus
Name of the Vulnerable Software and Affected Versions: xxyopen Novel-Plus version 3.5.0 Description: A critical vulnerability has been found in xxyopen Novel-Plus. This affects an unknown part of the file "/api/front/search/books". The manipulation of the sort argument leads to SQL injection. It ...
CVE-2025-3369
A vulnerability was found in xxyopen Novel-Plus 5.1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /novel/friendLink/list. The manipulation of the argument sort leads to sql injection. The attack may be launched remotely. The exploit has been...
CVE-2025-3369
A vulnerability was found in xxyopen Novel-Plus 5.1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /novel/friendLink/list. The manipulation of the argument sort leads to sql injection. The attack may be launched remotely. The exploit has been...
CVE-2025-3369 xxyopen Novel-Plus list sql injection
A vulnerability was found in xxyopen Novel-Plus 5.1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /novel/friendLink/list. The manipulation of the argument sort leads to sql injection. The attack may be launched remotely. The exploit has been...
CVE-2025-3369
CVE-2025-3369 affects xxyopen Novel-Plus 5.1.0. A vulnerability exists in the file /novel/friendLink/list where manipulating the sort argument leads to SQL injection. The issue may be exploited remotely and has been publicly disclosed. Connected sources consistently describe this as a remote SQL ...
CVE-2025-3369 xxyopen Novel-Plus list sql injection
A vulnerability was found in xxyopen Novel-Plus 5.1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /novel/friendLink/list. The manipulation of the argument sort leads to sql injection. The attack may be launched remotely. The exploit has been...
CVE-2025-3369 xxyopen Novel-Plus list sql injection
A vulnerability was found in xxyopen Novel-Plus 5.1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /novel/friendLink/list. The manipulation of the argument sort leads to sql injection. The attack may be launched remotely. The exploit has been...
PT-2025-15230 · Unknown · Xxyopen Novel-Plus
Name of the Vulnerable Software and Affected Versions: xxyopen Novel-Plus version 5.1.0 Description: A critical issue affects some unknown functionality of the file /novel/friendLink/list. The manipulation of the sort argument leads to SQL injection. The attack may be launched remotely...
Novel-Plus 注入漏洞
Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. An injection vulnerability exists in Novel-Plus version 5.1.0, which stems from the fact that incorrect manipulation of the parameter sort can lead to SQL injection...