12 matches found
EUVD-2019-7848
Malware in sbrugna...
CVE-2019-17491
Jiangnan Online Judge aka jnoj 0.8.0 has XSS via the Problemdescription parameter to web/admin/problem/create or web/polygon/problem/update...
Design/Logic Flaw
Jiangnan Online Judge aka jnoj 0.8.0 has XSS via the Problemsampleinput parameter to web/admin/problem/create or web/polygon/problem/update...
CVE-2019-17489
Jiangnan Online Judge aka jnoj 0.8.0 has XSS via the Problemtitle parameter to web/polygon/problem/create or web/polygon/problem/update or web/admin/problem/create...
CVE-2019-17491
Jiangnan Online Judge aka jnoj 0.8.0 has XSS via the Problemdescription parameter to web/admin/problem/create or web/polygon/problem/update...
CVE-2019-17493
Jiangnan Online Judge aka jnoj 0.8.0 has XSS via the Problemsampleinput parameter to web/admin/problem/create or web/polygon/problem/update...
PT-2019-15168
Name of the Vulnerable Software and Affected Versions Jiangnan Online Judge aka jnoj version 0.8.0 Description The issue concerns an XSS vulnerability. It can be exploited via the sample input parameter in specific API endpoints, such as "web/admin/problem/create" or "web/polygon/problem/update"...
CVE-2019-17491: Improper Neutralization of Input During Web Page Generation
Jiangnan Online Judge aka jnoj 0.8.0 has XSS via the Problemdescription parameter to web/admin/problem/create or web/polygon/problem/update...
PT-2019-15164
Name of the Vulnerable Software and Affected Versions Jiangnan Online Judge aka jnoj version 0.8.0 Description The issue concerns a security problem where an attacker can execute malicious scripts on the website. This is achieved through the Problemtitle parameter in specific API endpoints, such ...
PT-2019-15167
Name of the Vulnerable Software and Affected Versions Jiangnan Online Judge aka jnoj version 0.8.0 Description The issue concerns a security problem where an attacker can execute malicious scripts. This is possible due to the lack of proper input validation in the Problemdescription parameter. Th...
CVE-2019-17493: Improper Neutralization of Input During Web Page Generation
Jiangnan Online Judge aka jnoj 0.8.0 has XSS via the Problemsampleinput parameter to web/admin/problem/create or web/polygon/problem/update...
CVE-2019-17489: Improper Neutralization of Input During Web Page Generation
Jiangnan Online Judge aka jnoj 0.8.0 has XSS via the Problemtitle parameter to web/polygon/problem/create or web/polygon/problem/update or web/admin/problem/create...