CVE-2025-2207 aitangbao springboot-manager dept cross site scripting

A vulnerability classified as problematic was found in aitangbao springboot-manager 3.0. This vulnerability affects unknown code of the file /sys/dept. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2025-2207

CVE-2025-2207 affects aitangbao springboot-manager 3.0. The vulnerability arises from manipulation of the argument name in code handling /sys/dept, resulting in cross-site scripting. The attack can be initiated remotely and the exploit has been disclosed publicly. Other parameters may also be aff...

CVE-2025-2207 aitangbao springboot-manager dept cross site scripting

A vulnerability classified as problematic was found in aitangbao springboot-manager 3.0. This vulnerability affects unknown code of the file /sys/dept. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2025-2206 aitangbao springboot-manager permission cross site scripting

A vulnerability classified as problematic has been found in aitangbao springboot-manager 3.0. This affects an unknown part of the file /sys/permission. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclos...

CVE-2025-2206 aitangbao springboot-manager permission cross site scripting

A vulnerability classified as problematic has been found in aitangbao springboot-manager 3.0. This affects an unknown part of the file /sys/permission. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclos...

CVE-2025-2206

Summary of CVE-2025-2206 (aitangbao springboot-manager 3.0) A vulnerability exists in aitangbao springboot-manager version 3.0 involving the file /sys/permission. The issue arises from manipulation of the name argument, which leads to cross-site scripting. The attack can be initiated remotely and...

springboot-manager 代码注入漏洞

springboot-manager is a backend management system based on SpringBoot + Thymeleaf + Layui + Apache Shiro + Redis + Mybatis Plus by an individual developer in China, liwenbin. A code injection vulnerability exists in springboot-manager version 3.0, which originates from cross-site scripting and...

springboot-manager 代码注入漏洞

springboot-manager is a backend management system based on SpringBoot + Thymeleaf + Layui + Apache Shiro + Redis + Mybatis Plus by an individual developer in China, liwenbin. A code injection vulnerability exists in springboot-manager version 3.0, which originates from cross-site scripting and...

PT-2025-10974

Name of the Vulnerable Software and Affected Versions: aitangbao springboot-manager version 3.0 Description: A vulnerability was found in aitangbao springboot-manager, affecting some unknown functionality of the file /sysDictDetail/add. The manipulation of the name argument leads to cross-site...

CVE-2025-2211: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in aitangbao springboot-manager 3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /sysDictDetail/add. The manipulation of the argument name leads to cross site scripting. The attack may be launched remotely. The exploit h...

CVE-2025-2209: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in aitangbao springboot-manager 3.0. Affected is an unknown function of the file /sysDict/add. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-2206: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in aitangbao springboot-manager 3.0. This affects an unknown part of the file /sys/permission. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclos...

PT-2025-10904

Name of the Vulnerable Software and Affected Versions: aitangbao springboot-manager version 3.0 Description: A problematic issue has been found in the Filename Handler component, affecting the processing of the file /sysFiles/upload. The manipulation of the name argument leads to cross-site...

CVE-2025-2207: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in aitangbao springboot-manager 3.0. This vulnerability affects unknown code of the file /sys/dept. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the...

PT-2025-10971

Name of the Vulnerable Software and Affected Versions: aitangbao springboot-manager version 3.0 Description: A problematic issue was found in the /sysDict/add file, where the manipulation of the argument name leads to cross site scripting attacks. These attacks can be launched remotely. The issue...

springboot-manager 代码注入漏洞

springboot-manager is a backend management system based on SpringBoot + Thymeleaf + Layui + Apache Shiro + Redis + Mybatis Plus by an individual developer in China, liwenbin. A code injection vulnerability exists in springboot-manager version 3.0, which originates from cross-site scripting and...

PT-2025-10896

Name of the Vulnerable Software and Affected Versions: aitangbao springboot-manager version 3.0 Description: A problematic vulnerability was found in the code of the file /sys/dept, allowing for cross site scripting attacks through the manipulation of the name argument. The attack can be initiate...

springboot-manager 代码注入漏洞

springboot-manager is a backend management system based on SpringBoot + Thymeleaf + Layui + Apache Shiro + Redis + Mybatis Plus by an individual developer in China, liwenbin. A code injection vulnerability exists in springboot-manager version 3.0, which originates from cross-site scripting and...

PT-2025-10895 · Unknown · Aitangbao Springboot-Manager

Name of the Vulnerable Software and Affected Versions: aitangbao springboot-manager version 3.0 Description: A problematic vulnerability has been found in aitangbao springboot-manager, affecting an unknown part of the file /sys/permission. The manipulation of the name argument leads to cross-site...

springboot-manager 代码注入漏洞

springboot-manager is a backend management system based on SpringBoot + Thymeleaf + Layui + Apache Shiro + Redis + Mybatis Plus by an individual developer in China, liwenbin. A code injection vulnerability exists in springboot-manager version 3.0, which originates from cross-site scripting and...