48 matches found
CVE-2026-94410 Exposure of Role List to Low-Privileged Remote Users in Bender Custom&Partner Service
A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This results in a low level of confidentiality breach, as no particularly sensitive information is affected...
CVE-2026-94410 Exposure of Role List to Low-Privileged Remote Users in Bender Custom&Partner Service
A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This results in a low level of confidentiality breach, as no particularly sensitive information is affected...
CVE-2026-94410
The Bender Custom&Partner Service is vulnerable to a Missing Authorization (CWE-862) flaw. A low-privileged remote attacker can access a list of roles that is intended to be restricted to administrators. This vulnerability results in a low-level confidentiality breach , although the documents sta...
CVE-2022-38286
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/role/list...
EUVD-2025-205493
A flaw has been found in JeecgBoot up to 3.9.0. Impacted is the function getDeptRoleList of the file /sys/sysDepartRole/getDeptRoleList. This manipulation of the argument departId causes improper authorization. The attack is possible to be carried out remotely. A high degree of complexity is need...
JeecgBoot Authorization Issue Vulnerability
JeecgBoot is a low-code development platform that fuses code generation and AI applications to help organizations rapidly achieve low-code development and build AI applications. JeecgBoot suffers from an authorization issue vulnerability, which stems from improper authorization of the parameter...
EUVD-2025-26189
Malicious code in bioql PyPI...
CVE-2025-9647
A weakness has been identified in mtons mblog up to 3.5.0. This issue affects some unknown processing of the file /admin/role/list. This manipulation of the argument Name causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the public and could...
CVE-2025-9647
A weakness has been identified in mtons mblog up to 3.5.0. This issue affects some unknown processing of the file /admin/role/list. This manipulation of the argument Name causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the public and could...
CVE-2025-9647
A weakness has been identified in mtons mblog up to 3.5.0. This issue affects some unknown processing of the file /admin/role/list. This manipulation of the argument Name causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the public and could...
CVE-2025-9647 mtons mblog list cross site scripting
A weakness has been identified in mtons mblog up to 3.5.0. This issue affects some unknown processing of the file /admin/role/list. This manipulation of the argument Name causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the public and could...
CVE-2025-9647 mtons mblog list cross site scripting
A weakness has been identified in mtons mblog up to 3.5.0. This issue affects some unknown processing of the file /admin/role/list. This manipulation of the argument Name causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the public and could...
CVE-2025-9647
CVE-2025-9647 affects mtons mblog up to version 3.5.0. Root cause: manipulation of the Name argument in the file /admin/role/list enables cross-site scripting. Impact includes potential user-visible script execution with network‑based access and no privileges required, with user interaction repor...
mblog security vulnerabilities
mblog is a blogging system by langhsu individual developer. A security vulnerability exists in mblog 3.5.0 and earlier versions, which originates from cross-site scripting due to misuse of the parameter Name in the file /admin/role/list...
PT-2025-35216
Name of the Vulnerable Software and Affected Versions mtons mblog versions up to 3.5.0 Description A weakness exists in mtons mblog due to cross site scripting. The issue affects unknown processing of the file /admin/role/list. Manipulation of the Name argument causes the issue. The exploit has...
CVE-2025-9647: Improper Neutralization of Input During Web Page Generation
A weakness has been identified in mtons mblog up to 3.5.0. This issue affects some unknown processing of the file /admin/role/list. This manipulation of the argument Name causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the public and could...
CVE-2025-8163
A vulnerability, which was classified as critical, was found in deerwms deer-wms-2 up to 3.3. This affects an unknown part of the file /system/role/list. The manipulation of the argument paramsdataScope leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
Deer-WMS-2 injection vulnerability
deer-wms-2 is a warehouse management system in China deerwms open source . Deer-wms-2 3.3 and earlier versions exist injection vulnerability, the vulnerability stems from the file /system/role/list on the parameter params dataScope wrong operation leads to SQL injection...
CVE-2025-8163: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in deerwms deer-wms-2 up to 3.3. This affects an unknown part of the file /system/role/list. The manipulation of the argument paramsdataScope leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...