CVE-2022-28462

novel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability...

Arbitrary file deletion

novel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability...

CVE-2022-28462

novel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability...

CVE-2022-28462

novel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability...

CVE-2022-28462

CVE-2022-28462 affects novel-plus 3.6.0 with an Arbitrary file reading vulnerability caused by lack of restrictions on file parameters. NVD CVSSv3.1 base score 7.5 (HIGH) with network access and no privileges required; confidentiality impact HIGH. PT-Security notes no available fix as of their en...

PT-2022-19043 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: novel-plus version 3.6.0 Description: The issue is related to an Arbitrary file reading vulnerability. Recommendations: For novel-plus version 3.6.0, at the moment, there is no information about a newer version that contains a fix for this...

novel-plus 安全漏洞

novel-plus novel-plus is a multi-end PC, WAP reading, full-featured original literature CMS system. A security vulnerability exists in novel-plus 3.6.0, which is caused by an arbitrary file read vulnerability due to a lack of restrictions on file parameters in the application...

CVE-2021-41921

novel-plus V3.6.1 allows unrestricted file uploads. Unrestricted file suffixes and contents can lead to server attacks and arbitrary code execution...

CVE-2021-41921

novel-plus V3.6.1 allows unrestricted file uploads. Unrestricted file suffixes and contents can lead to server attacks and arbitrary code execution...

CVE-2021-41921

novel-plus V3.6.1 allows unrestricted file uploads. Unrestricted file suffixes and contents can lead to server attacks and arbitrary code execution...

CVE-2021-41921

novel-plus V3.6.1 allows unrestricted file uploads. Unrestricted file suffixes and contents can lead to server attacks and arbitrary code execution...

CVE-2021-41921

CVE-2021-41921 affects novel-plus v3.6.1, where unrestricted uploads (suffixes and contents) enable server attacks and arbitrary code execution. The connected PT-2022-11503 entry confirms the issue stems from allowing unrestricted file uploads and recommends strict file type validation, content c...

PT-2022-11503 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: novel-plus version 3.6.1 Description: The issue allows unrestricted file uploads, which can lead to server attacks and arbitrary code execution due to unrestricted file suffixes and contents. Recommendations: For novel-plus version 3.6.1,...

CVE-2022-24568

Novel-plus v3.6.0 was discovered to be vulnerable to Server-Side Request Forgery SSRF via user-supplied crafted input...

CVE-2022-24568

Novel-plus v3.6.0 was discovered to be vulnerable to Server-Side Request Forgery SSRF via user-supplied crafted input...

Server side request forgery (ssrf)

Novel-plus v3.6.0 was discovered to be vulnerable to Server-Side Request Forgery SSRF via user-supplied crafted input...

CVE-2022-24568

Novel-plus v3.6.0 was discovered to be vulnerable to Server-Side Request Forgery SSRF via user-supplied crafted input...

CVE-2022-24568

Novel-plus v3.6.0 was discovered to be vulnerable to Server-Side Request Forgery SSRF via user-supplied crafted input...

CVE-2022-24568

CVE-2022-24568 affects Novel-plus v3.6.0, exposing a Server-Side Request Forgery (SSRF) flaw via user-supplied crafted input. In the provided documents, the vulnerability is described consistently across sources (NVD entry and Red Hat/PRION/OSV/CVE lists) as SSRF with high impact across confident...

PT-2022-16723 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: Novel-plus version 3.6.0 Description: The issue is related to Server-Side Request Forgery SSRF that can be triggered via user-supplied crafted input. Recommendations: For Novel-plus version 3.6.0, update to a version that fixes the Server-Sid...