Lucene search
K

9 matches found

NVD
NVD
added 2025/12/28 6:15 p.m.3 views

CVE-2025-15146

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. This impacts the function doUserList of the file src/main/java/com/sohu/cache/web/controller/UserManageController.java. Performing manipulation results in cross site scripting. The attack may be initiated remotely. The exploit is now...

4.8CVSS0.00033EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/12/28 5:32 p.m.20 views

CVE-2025-15146 SohuTV CacheCloud UserManageController.java doUserList cross site scripting

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. This impacts the function doUserList of the file src/main/java/com/sohu/cache/web/controller/UserManageController.java. Performing manipulation results in cross site scripting. The attack may be initiated remotely. The exploit is now...

4.8CVSS0.00033EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/12/28 5:32 p.m.1 views

CVE-2025-15146 SohuTV CacheCloud UserManageController.java doUserList cross site scripting

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. This impacts the function doUserList of the file src/main/java/com/sohu/cache/web/controller/UserManageController.java. Performing manipulation results in cross site scripting. The attack may be initiated remotely. The exploit is now...

4.8CVSS3AI score0.00033EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/12/28 12:0 a.m.1 views

CacheCloud 代码注入漏洞

CacheCloud is a Redis cloud management platform open-sourced by SohuTV. A code injection vulnerability exists in SohuTV CacheCloud 3.2.0 and earlier versions, which originates from a misbehavior of the function doUserList in the file...

4.8CVSS4.2AI score0.00033EPSS
Exploits1References6
NVD
NVD
added 2024/05/03 3:15 a.m.21 views

CVE-2023-40513

LG Simple Editor UserManageController getImageByFilename Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Although authentication is required to exploit this...

6.5CVSS6.2AI score0.00159EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/03 2:11 a.m.25 views

CVE-2023-40513 LG Simple Editor UserManageController getImageByFilename Directory Traversal Information Disclosure Vulnerability

LG Simple Editor UserManageController getImageByFilename Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Although authentication is required to exploit this...

6.5CVSS6.2AI score0.00159EPSS
Exploits0References1
CVE
CVE
added 2024/05/03 2:11 a.m.56 views

CVE-2023-40513

CVE-2023-40513 – LG Simple Editor : The issue affects LG Simple Editor’s UserManageController.getImageByFilename, caused by insufficient validation of a user-supplied path before file operations. This directory-traversal leads to information disclosure under SYSTEM context. The vulnerability is p...

6.5CVSS6.2AI score0.00159EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/05/03 2:11 a.m.22 views

CVE-2023-40513 LG Simple Editor UserManageController getImageByFilename Directory Traversal Information Disclosure Vulnerability

LG Simple Editor UserManageController getImageByFilename Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Although authentication is required to exploit this...

6.5CVSS6.4AI score0.00159EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/08/24 12:0 a.m.14 views

(0Day) LG Simple Editor UserManageController getImageByFilename Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

6.5CVSS6.4AI score0.00159EPSS
Exploits0
Rows per page
Query Builder