609 matches found
Directory traversal
Directory Traversal in the fileDownload function in com/java2nb/common/controller/FileController.java in Novel-plus ?????-plus 3.5.1 allows attackers to read arbitrary files via the filePath parameter...
CVE-2021-30048
Directory Traversal in the fileDownload function in com/java2nb/common/controller/FileController.java in Novel-plus 小说精品屋-plus 3.5.1 allows attackers to read arbitrary files via the filePath parameter...
CVE-2021-30048
Novel-plus (小说精品屋-plus) 3.5.1 contains a Directory Traversal in the fileDownload function of FileController.java that allows reading arbitrary files via the filePath parameter. This is documented across multiple sources (NVD, Red Hat, OSV, CVE lists, and PT Security) with no publicly disclosed fi...
PT-2021-18585 · Unknown · Novel-Plus
Name of the Vulnerable Software and Affected Versions: Novel-plus 小说精品屋-plus version 3.5.1 Description: The issue allows attackers to read arbitrary files via the filePath parameter in the fileDownload function located in com/java2nb/common/controller/FileController.java. This enables access to...
SQL Injection Vulnerability in Novel House-plus Backend
Novel boutique-plus novel-plus is a multi-end PC, WAP reading, functional original literature CMS system , built on SpringCloud , using MyBatis as the persistence layer . A SQL injection vulnerability exists in the backend of Novel Boutique-plus. An attacker can exploit the vulnerability to obtai...
SQL Injection Vulnerability in Fiction Boutique
Novel Boutique House is a multi-end PC, WAP reading, well-functioning original literature CMS system. A SQL injection vulnerability exists in Novel Boutique. An attacker can exploit this vulnerability to obtain sensitive information...
Novel Boutique House-plus 3.5.1 - Arbitrary File Download Vulnerability
Exploit Title: Novel Boutique House-plus 3.5.1 - Arbitrary File Download Exploit Author: tuyiqiang Vendor Homepage: https://xiongxyang.gitee.io/ Software Link: https://gitee.com/noveldevteam/novel-plus,https://github.com/201206030/novel-plus Version: all Tested on: linux Vulnerable code:...
Novel Boutique House-plus 3.5.1 - Arbitrary File Download
Exploit Title: Novel Boutique House-plus 3.5.1 - Arbitrary File Download Date: 27/03/2021 Exploit Author: tuyiqiang Vendor Homepage: https://xiongxyang.gitee.io/ Software Link: https://gitee.com/noveldevteam/novel-plus,https://github.com/201206030/novel-plus Version: all Tested on: linux Vulnerab...
SQL Injection Vulnerability in Wild Rain Novel Cms
Wild Rain Fiction CMS is a lightweight fiction website solution based on ThinkPHP 5.1+MySQL. Raining Novels cms has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...
Denial of Service Vulnerability in Yiso Novels at Shenzhen Yiso World Technology Co.
Yiso Novel is one of the most complete and fastest reading and catching up artifacts launched by Yiso Technology, which has a huge amount of free book resources, completely free of charge, and supports full-book caching, and it is the most professional e-book reading software. Shenzhen Yisou Worl...
WMCMS open source novel system V4.367.977 exists file upload vulnerability
WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS open source novel system V4.367.977 file upload vulnerability , attackers can use the vulnerability to obtain server administrative privileges...
WMCMS open source novel system V4.367.977 exists file upload vulnerability
WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS open source novel system V4.367.977 file upload vulnerability , attackers can use the vulnerability to obtain server administrative privileges...
WMCMS open source novel system V4.367.977 exists arbitrary file reading vulnerability
WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS open source novel system V4.367.977 arbitrary file reading vulnerability , an attacker can use the vulnerability to obtain sensitive information...
Beijing Tianying Jiuzhou Network Technology Co., Ltd. flipping novels APP there are logic flaws vulnerability
Flip Novel App is a reading app that allows you to read original novels. Beijing Tianying Jiuzhou Network Technology Co., Ltd Flip Novel APP has a logic flaw vulnerability. Attackers can use the vulnerability to arbitrarily bind other people's cell phone numbers that are not bound to the APP and...
Rainy novel cms 1.2.2 background template management function there are directory traversal vulnerabilities
Wild Rain Fiction cms hereinafter referred to as KYXSCMS provides a lightweight fiction website solution based on ThinkPHP 5.1+MySQL. A directory traversal vulnerability exists in the backend template management feature of Drizzle Novel cms 1.2.2. Attackers can use the vulnerability to view file...
Online Credit Card Skimmers Are Thriving During the Pandemic
As brick and mortars close due to the novel coronavirus, thieves have increasingly targeted digital checkout...
Researchers Warn of Novel PXJ Ransomware Strain
Researchers have discovered a new strain of ransomware, dubbed “PXJ,” which emerged in the wild in early 2020. While PXJ performs functions similar to other ransomware variants, it does not appear to share the same underlying code with most known ransomware families, researchers said. They first...
SQL Injection Vulnerability in the Raining Novels cms Ne***.phpp File
Wild Rain Fiction cms hereinafter referred to as KYXSCMS provides a lightweight fiction website solution based on ThinkPHP 5.1+MySQL. A SQL injection vulnerability exists in the Ne.phpp file of the Drizzle Novel cms. An attacker can exploit this vulnerability to obtain database information...
Code Execution Vulnerabilities in the Background of Wild Rain Novel CMS
Wild Rain Fiction Content Management System provides a lightweight fiction website solution based on ThinkPHP 5.1+MySQL. Rain Novel cms backend code execution vulnerabilities , attackers can use the vulnerability to obtain server privileges...
