48 matches found
Cross site scripting
SENS v1.0 is vulnerable to Cross Site Scripting XSS via com.liuyanzhao.sens.web.controller.admin, getRegister...
Privilege escalation
SENS v1.0 has a file upload vulnerability...
Improper access control
SENS v1.0 is vulnerable to Incorrect Access Control vulnerability...
SENS 跨站脚本漏洞
SENS is an enterprise blogging system by saysky individual developer. A cross-site scripting vulnerability exists in SENS v1.0, which stems from vulnerability to cross-site scripting XSS attacks...
CVE-2022-45756
SENS v1.0 is vulnerable to Cross Site Scripting XSS...
CVE-2022-45756
CVE-2022-45756 affects SENS v1.0 and is described as vulnerable to Cross-Site Scripting (XSS). Connected sources do not provide detailed root-cause, affected components beyond the SENS v1.0 label, or concrete remediation steps. At least one source notes no information about a fix for SENS v1.0. T...
SENS 安全漏洞
SENS is an enterprise level blogging system by saysky individual developer. A security vulnerability exists in SENS v1.0, which stems from the presence of an incorrect access control vulnerability...
CVE-2022-45759
The CVE-2022-45759 entry concerns SENS v1.0 with a file upload vulnerability in the web application’s upload functionality. Affected software: SENS version 1.0. The CVSS 3.1 base score is 8.8 (HIGH), with network attack vector, low attack complexity, no privileges required, and user interaction r...
CVE-2022-45759
SENS v1.0 has a file upload vulnerability...
CVE-2022-45758
SENS v1.0 is vulnerable to Cross Site Scripting XSS via com.liuyanzhao.sens.web.controller.admin, getRegister...
SENS 跨站脚本漏洞
SENS is an enterprise blog system by saysky individual developer. A cross-site scripting vulnerability exists in SENS v1.0, which originates from a cross-site scripting attack XSS on com.liuyanzhao.sens.web.controller.admin, getRegister...
CVE-2022-45760
SENS v1.0 is vulnerable to Incorrect Access Control vulnerability...
CVE-2022-45756
SENS v1.0 is vulnerable to Cross Site Scripting XSS...
SENS 代码问题漏洞
SENS is an enterprise blog system by saysky individual developer. A code issue vulnerability exists in SENS v1.0, which stems from the presence of a file upload vulnerability...
CVE-2022-45759
SENS v1.0 has a file upload vulnerability...
CVE-2022-45758
CVE-2022-45758 affects SENS v1.0, where the Cross Site Scripting (XSS) vulnerability exists in the admin controller’s getRegister function (com.liuyanzhao.sens.web.controller.admin). The issue is documented across multiple feeds and lists SENS v1.0 as vulnerable to XSS, with CVSSv3.1 base score 5...
CVE-2022-45758
SENS v1.0 is vulnerable to Cross Site Scripting XSS via com.liuyanzhao.sens.web.controller.admin, getRegister...
PT-2022-27636 · Sens · Sens
Name of the Vulnerable Software and Affected Versions: SENS version 1.0 Description: The issue is related to Cross Site Scripting XSS. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited...
CVE-2022-45760
Affected software : SENS v1.0. Vulnerability : Incorrect Access Control, potentially allowing unauthorized access to data or privileged functions. Root cause described in connected sources as improper access control. Versions affected : SENS 1.0. Exploitation : not described in the provided docum...