Lucene search
+L

5 matches found

Positive Technologies
Positive Technologies
•added 2025/03/23 12:00 a.m.•5 views

PT-2025-12520

Name of the Vulnerable Software and Affected Versions JIZHICMS versions up to 1.7.0 Description A vulnerability has been found in the Article Handler component, affecting the file /user/release.html. This issue leads to improper authorization and can be initiated remotely. The manipulation affect...

5.3CVSS0.00405EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/23 12:00 a.m.•4 views

CVE-2025-2639: Improper Authorization

A vulnerability has been found in JIZHICMS up to 1.7.0 and classified as problematic. This vulnerability affects unknown code of the file /user/release.html of the component Article Handler. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has be...

5.3CVSS4.8AI score0.00405EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/23 12:00 a.m.•4 views

CVE-2025-2638: Improper Authorization

A vulnerability, which was classified as problematic, was found in JIZHICMS up to 1.7.0. This affects an unknown part of the file /user/release.html of the component Article Handler. The manipulation of the argument ishot with the input 1 leads to improper authorization. It is possible to initiat...

5.3CVSS4.9AI score0.00405EPSS
SaveExploits1References1
NVD
NVD
•added 2021/10/01 9:15 p.m.•26 views

CVE-2020-21228

JIZHICMS 1.5.1 contains a cross-site scripting XSS vulnerability in the component /user/release.html, which allows attackers to arbitrarily add an administrator cookie...

6.1CVSS0.00808EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/01 12:00 a.m.•7 views

CVE-2020-21228: Improper Neutralization of Input During Web Page Generation

JIZHICMS 1.5.1 contains a cross-site scripting XSS vulnerability in the component /user/release.html, which allows attackers to arbitrarily add an administrator cookie...

6.1CVSS5.6AI score0.00808EPSS
SaveExploits1References6
Rows per page
Query Builder