CVE-2024-13137 wangl1989 mysiteforme SiteController RestResponse cross site scripting

A vulnerability was found in wangl1989 mysiteforme 1.0. It has been classified as problematic. This affects the function RestResponse of the file src/main/java/com/mysiteforme/admin/controller/system/SiteController. The manipulation leads to cross site scripting. It is possible to initiate the...

Mysiteforme 代码注入漏洞

Mysiteforme is a permission management system for wangl1989 individual developers. A code injection vulnerability exists in Mysiteforme version 1.0, which originates from the RestResponse function of the file src/main/java/com/mysiteforme/admin/controller/system/SiteController that can lead to...

File upload vulnerability in SchoolCMS backend SiteController.class.php

SchoolCMS is a school teaching management system based on PHP+MySQL. A file upload vulnerability exists in the SchoolCMS backend SiteController.class.php, due to the system Upload function not effectively filtering user-submitted data. A remote attacker can arbitrarily write files to gain web...