Lucene search
+L

91 matches found

Mend
Mend
•added 2024/05/07 12:00 a.m.•4 views

CVE-2024-33124

Roothub v2.6 was discovered to contain a SQL injection vulnerability via the nodeTitle parameter in the parentNode function...

9.8CVSS0.00503EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/07 12:00 a.m.•18 views

Roothub 安全漏洞

Roothub is a forum system developed using SSM and MySQL. A security vulnerability exists in Roothub version v2.6, which stems from the discovery of an SQL injection vulnerability via the nodeTitle parameter in the parentNode function...

9.8CVSS8AI score0.00503EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/07 12:00 a.m.•5 views

CVE-2024-33120: Unrestricted Upload of File with Dangerous Type

Roothub v2.5 was discovered to contain an arbitrary file upload vulnerability via the customPath parameter in the upload function. This vulnerability allows attackers to execute arbitrary code via a crafted JSP file...

9.8CVSS6.5AI score0.00778EPSS
SaveExploits0References4
CVE
CVE
•added 2024/05/07 12:00 a.m.•78 views

CVE-2024-33122

Roothub v2.6 is affected by a SQL injection vulnerability located in the list() function. The root cause is the improper neutralization of special elements provided via the topic parameter. This vulnerability allows an attacker to execute unintended SQL commands. As a temporary workaround, users ...

6.3CVSS8.2AI score0.00339EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/05/07 12:00 a.m.•52 views

CVE-2024-33124

Roothub v2.6 was discovered to contain a SQL injection vulnerability via the nodeTitle parameter in the parentNode function...

8.1AI score0.00503EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/05/07 12:00 a.m.•44 views

CVE-2024-33122

Roothub v2.6 was discovered to contain a SQL injection vulnerability via the topic parameter in the list function...

8.1AI score0.00339EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/07 12:00 a.m.•21 views

PT-2024-25125 · Roothub · Roothub

Name of the Vulnerable Software and Affected Versions: Roothub version 2.6 Description: A SQL injection issue was discovered via the nodeTitle parameter in the parentNode function. This allows for potential exploitation. Recommendations: For Roothub version 2.6, as a temporary workaround, conside...

9.8CVSS8AI score0.00503EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2024/05/07 12:00 a.m.•20 views

CVE-2024-33124

Roothub v2.6 was discovered to contain a SQL injection vulnerability via the nodeTitle parameter in the parentNode function...

8.3AI score0.00503EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/07 12:00 a.m.•16 views

Roothub 安全漏洞

Roothub is a forum system developed using SSM and MySQL. A security vulnerability exists in Roothub v2.5, which originates from an arbitrary file upload vulnerability that allows an attacker to execute arbitrary code via a crafted JSP file...

9.8CVSS7.7AI score0.00778EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/05/07 12:00 a.m.•15 views

PT-2024-25124 · Roothub · Roothub

Name of the Vulnerable Software and Affected Versions: Roothub version 2.6 Description: The issue is related to a SQL injection vulnerability. This vulnerability occurs via the topic parameter in the list function. Recommendations: For Roothub version 2.6, consider restricting the use of the list...

6.3CVSS8.1AI score0.00339EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/07 12:00 a.m.•7 views

CVE-2024-33124: Improper Neutralization of Special Elements used in an SQL Command

Roothub v2.6 was discovered to contain a SQL injection vulnerability via the nodeTitle parameter in the parentNode function...

9.8CVSS5.8AI score0.00503EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/05/07 12:00 a.m.•47 views

CVE-2024-33120

Roothub v2.5 was discovered to contain an arbitrary file upload vulnerability via the customPath parameter in the upload function. This vulnerability allows attackers to execute arbitrary code via a crafted JSP file...

8AI score0.00778EPSS
SaveExploits0References1
OSV
OSV
•added 2024/05/06 8:15 p.m.•17 views

CVE-2024-33121

Roothub v2.6 was discovered to contain a SQL injection vulnerability via the 's' parameter in the search function...

6.3CVSS5.8AI score0.00329EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/06 8:15 p.m.•28 views

CVE-2024-33121

Roothub v2.6 was discovered to contain a SQL injection vulnerability via the 's' parameter in the search function...

6.3CVSS7.8AI score0.00329EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/06 12:00 a.m.•4 views

CVE-2024-33121: Improper Neutralization of Special Elements used in an SQL Command

Roothub v2.6 was discovered to contain a SQL injection vulnerability via the 's' parameter in the search function...

6.3CVSS5.8AI score0.00329EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/05/06 12:00 a.m.•37 views

CVE-2024-33121

Roothub v2.6 was discovered to contain a SQL injection vulnerability via the 's' parameter in the search function...

8.1AI score0.00329EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/06 12:00 a.m.•18 views

CVE-2024-33121

Roothub v2.6 was discovered to contain a SQL injection vulnerability via the 's' parameter in the search function...

8.3AI score0.00329EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/06 12:00 a.m.•15 views

PT-2024-25123 · Roothub · Roothub

Name of the Vulnerable Software and Affected Versions: Roothub version 2.6 Description: A SQL injection issue was discovered in Roothub via the s parameter in the search function. This allows for potential exploitation. No information is provided about the estimated number of potentially affected...

6.3CVSS8.1AI score0.00329EPSS
SaveExploits0References6
CVE
CVE
•added 2024/05/06 12:00 a.m.•79 views

CVE-2024-33121

Roothub version 2.6 , a forum system developed using SSM and MySQL, contains a SQL injection vulnerability. The flaw exists in the search() function via the 's' parameter, allowing for potential exploitation. To mitigate this risk, it is recommended to disable the search() function until a patch ...

6.3CVSS8.2AI score0.00329EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/05/06 12:00 a.m.•19 views

Roothub 安全漏洞

Roothub is a forum system developed using SSM and MySQL. A security vulnerability exists in Roothub v2.6, which was discovered to contain an SQL injection vulnerability via the "s" parameter in the search function...

6.3CVSS8.3AI score0.00329EPSS
SaveExploits0References2
Rows per page
Query Builder