Lucene search
K

33 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 12:40 p.m.3 views

CVE-2023-43191

SpringbootCMS 1.0 foreground message can be embedded malicious code saved in the database. When users browse the comments, these malicious codes embedded in the HTML will be executed, and the user's browser will be controlled by the attacker, so as to achieve the special purpose of the attacker,...

5.4CVSS7AI score0.00176EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:39 p.m.3 views

CVE-2023-43192

SQL injection can exist in a newly created part of the SpringbootCMS 1.0 background, and the parameters submitted by users are not filtered. As a result, special characters in parameters destroy the original logic of SQL statements. Attackers can use this vulnerability to execute any SQL statemen...

8.8CVSS8AI score0.00167EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-47614

Malicious code in bioql PyPI...

5.3CVSS4.8AI score0.00111EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-51638

Malicious code in bioql PyPI...

7.2CVSS7.1AI score0.00429EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-47611

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.00167EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2023-47610

Malicious code in bioql PyPI...

5.4CVSS5.7AI score0.00176EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:3 a.m.6 views

CVE-2024-6539

A vulnerability classified as problematic has been found in heyewei SpringBootCMS up to 2024-05-28. Affected is an unknown function of the file /guestbook of the component Guestbook Handler. The manipulation of the argument Content leads to cross site scripting. It is possible to launch the attac...

5.3CVSS6.3AI score0.00111EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:54 p.m.4 views

CVE-2022-4282

A vulnerability was found in SpringBootCMS and classified as critical. Affected by this issue is some unknown functionality of the component Template Management. The manipulation leads to injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

7.2CVSS7.3AI score0.00429EPSS
Exploits1References1
NVD
NVD
added 2024/07/07 11:15 p.m.12 views

CVE-2024-6539

A vulnerability classified as problematic has been found in heyewei SpringBootCMS up to 2024-05-28. Affected is an unknown function of the file /guestbook of the component Guestbook Handler. The manipulation of the argument Content leads to cross site scripting. It is possible to launch the attac...

5.3CVSS0.00111EPSS
Exploits1References3
Cvelist
Cvelist
added 2024/07/07 10:31 p.m.19 views

CVE-2024-6539 heyewei SpringBootCMS Guestbook guestbook cross site scripting

A vulnerability classified as problematic has been found in heyewei SpringBootCMS up to 2024-05-28. Affected is an unknown function of the file /guestbook of the component Guestbook Handler. The manipulation of the argument Content leads to cross site scripting. It is possible to launch the attac...

5.3CVSS0.00111EPSS
Exploits1References3
CVE
CVE
added 2024/07/07 10:31 p.m.44 views

CVE-2024-6539

CVE-2024-6539 – heyewei SpringBootCMS vulnerability affecting the Guestbook Handler component, specifically an unknown function of the file /guestbook. The manipulation of the Content parameter leads to cross-site scripting and can be exploited remotely. Public disclosure of exploits is indicated...

5.3CVSS3.9AI score0.00111EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/07/07 10:31 p.m.10 views

CVE-2024-6539 heyewei SpringBootCMS Guestbook guestbook cross site scripting

A vulnerability classified as problematic has been found in heyewei SpringBootCMS up to 2024-05-28. Affected is an unknown function of the file /guestbook of the component Guestbook Handler. The manipulation of the argument Content leads to cross site scripting. It is possible to launch the attac...

5.3CVSS6.2AI score0.00111EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/07/07 12:0 a.m.1 views

SpringBootCMS Cross-Site Scripting Vulnerability

SpringBootCMS is a content management system developed by heyewei personal developer. A cross-site scripting vulnerability exists in SpringBootCMS, which originates from a cross-site scripting vulnerability in the Content parameter of the Guestbook Handler...

5.3CVSS6.2AI score0.00111EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/07/07 12:0 a.m.1 views

PT-2024-37699 · Unknown · Heyewei Springbootcms

Name of the Vulnerable Software and Affected Versions: heyewei SpringBootCMS up to 2024-05-28 Description: A vulnerability has been found in the Guestbook Handler component of heyewei SpringBootCMS, affecting an unknown function of the file /guestbook. The manipulation of the Content argument lea...

5.3CVSS6.7AI score0.00111EPSS
Exploits1References9
OSV
OSV
added 2023/09/27 11:15 p.m.0 views

CVE-2023-43191

SpringbootCMS 1.0 foreground message can be embedded malicious code saved in the database. When users browse the comments, these malicious codes embedded in the HTML will be executed, and the user's browser will be controlled by the attacker, so as to achieve the special purpose of the attacker,...

5.4CVSS5.8AI score0.00176EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2023/09/27 11:15 p.m.0 views

CVE-2023-43191

SpringbootCMS 1.0 foreground message can be embedded malicious code saved in the database. When users browse the comments, these malicious codes embedded in the HTML will be executed, and the user's browser will be controlled by the attacker, so as to achieve the special purpose of the attacker,...

5.4CVSS6.1AI score0.00176EPSS
Exploits1References2
NVD
NVD
added 2023/09/27 11:15 p.m.13 views

CVE-2023-43191

SpringbootCMS 1.0 foreground message can be embedded malicious code saved in the database. When users browse the comments, these malicious codes embedded in the HTML will be executed, and the user's browser will be controlled by the attacker, so as to achieve the special purpose of the attacker,...

5.4CVSS5.5AI score0.00176EPSS
Exploits1References1
OSV
OSV
added 2023/09/27 10:15 p.m.1 views

CVE-2023-43192

SQL injection can exist in a newly created part of the SpringbootCMS 1.0 background, and the parameters submitted by users are not filtered. As a result, special characters in parameters destroy the original logic of SQL statements. Attackers can use this vulnerability to execute any SQL statemen...

8.8CVSS5.9AI score0.00167EPSS
Exploits1References2
NVD
NVD
added 2023/09/27 10:15 p.m.8 views

CVE-2023-43192

SQL injection can exist in a newly created part of the SpringbootCMS 1.0 background, and the parameters submitted by users are not filtered. As a result, special characters in parameters destroy the original logic of SQL statements. Attackers can use this vulnerability to execute any SQL statemen...

8.8CVSS9.1AI score0.00167EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2023/09/27 10:15 p.m.1 views

CVE-2023-43192

SQL injection can exist in a newly created part of the SpringbootCMS 1.0 background, and the parameters submitted by users are not filtered. As a result, special characters in parameters destroy the original logic of SQL statements. Attackers can use this vulnerability to execute any SQL statemen...

8.8CVSS7.4AI score0.00167EPSS
Exploits1References3
Rows per page
Query Builder