CVE-2024-31760

An issue in sanluan flipped-aurora gin-vue-admin 2.4.x allows an attacker to escalate privileges via the Session Expiration component...

CVE-2024-31760

An issue in sanluan flipped-aurora gin-vue-admin 2.4.x allows an attacker to escalate privileges via the Session Expiration component...

CVE-2024-31759

An issue in sanluan PublicCMS v.4.0.202302.e allows an attacker to escalate privileges via the change password function...

CVE-2024-31759

An issue in sanluan PublicCMS v.4.0.202302.e allows an attacker to escalate privileges via the change password function...

PT-2024-24199 · Sanluan · Publiccms

Name of the Vulnerable Software and Affected Versions: sanluan PublicCMS version 4.0.202302.e Description: An issue in the software allows an attacker to escalate privileges via the change password function. Recommendations: For sanluan PublicCMS version 4.0.202302.e, consider disabling the chang...

CVE-2024-31759

An issue in sanluan PublicCMS v.4.0.202302.e allows an attacker to escalate privileges via the change password function...

CVE-2024-31759

CVE-2024-31759 affects sanluan PublicCMS v4.0.202302.e. A vulnerability in the Change Password function allows privilege escalation. The issue is documented across several sources (NVD/Red Hat/CVE lists) with a high impact (CVSS v3.1: 8.8; Network attack vector, Privilege Required: Low, User Inte...

CVE-2024-31760

CVE-2024-31760 affects sanluan flipped-aurora gin-vue-admin 2.4.x. The Session Expiration component allows privilege escalation. A PoC exists per the Exploitation metadata, and the CVSSv3.1 score is 4.7 (Medium). No patch/version remediation is specified in the provided documents; one source note...

CVE-2022-3950

A vulnerability, which was classified as problematic, was found in sanluan PublicCMS. Affected is the function initLink of the file dwz.min.js of the component Tab Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is...

CVE-2022-3950

A vulnerability, which was classified as problematic, was found in sanluan PublicCMS. Affected is the function initLink of the file dwz.min.js of the component Tab Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is...

CVE-2022-3950

Sanluan PublicCMS contains a cross-site scripting vulnerability in the Tab Handler’s dwz.min.js, specifically the initLink function. The issue can be triggered remotely via manipulation of initLink and is described as a remote exploit. The patched version is identified by the patch name a972dc9b1...

PT-2022-24975 · Unknown · Sanluan Publiccms

Name of the Vulnerable Software and Affected Versions: sanluan PublicCMS affected versions not specified Description: A vulnerability was found in sanluan PublicCMS, affecting the function initLink of the file dwz.min.js of the component Tab Handler. The manipulation leads to cross-site scripting...

CVE-2022-3950 sanluan PublicCMS Tab dwz.min.js initLink cross site scripting

A vulnerability, which was classified as problematic, was found in sanluan PublicCMS. Affected is the function initLink of the file dwz.min.js of the component Tab Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is...