GHSA-6278-2Q4M-CMF3 ZK Framework vulnerable to malicious POST

ZK Framework version 9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the component AuUploader...

CVE-2022-36537

ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the component AuUploader...

Design/Logic Flaw

ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the component AuUploader...

CVE-2022-36537

CVE-2022-36537 – ZK Framework Information Disclosure . Affected versions of ZK Framework: 9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2, 8.6.4.1. An unauthenticated attacker can obtain sensitive data via a crafted POST to the AuUploader component, potentially exposing web-context files and configuration data....

CVE-2022-36537

ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the component AuUploader...

CVE-2022-36537

ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the component AuUploader...

CVE-2022-36537

ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the component AuUploader...

CVE-2022-36537

ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the component AuUploader. Recent assessments: ccondon-r7 at March 01, 2023 6:39pm UTC reported: The core vuln here is an info leak in ZK Framework, which ...

ZK 安全漏洞

ZK is a highly productive open source Java framework from ZK for building amazing enterprise web and mobile applications. A security vulnerability exists in ZK Framework versions v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2, and 8.6.4.1. An attacker could use this vulnerability to access sensitive informati...

PT-2022-6454 · Unknown · Zk Framework

Name of the Vulnerable Software and Affected Versions: ZK Framework versions 8.6.4.1, 9.0.1.2, 9.5.1.3, 9.6.0.1, 9.6.1 Description: The issue is related to the AuUploader component of the ZK Framework, which allows attackers to access sensitive information via a crafted POST request. This can...

CVE-2013-5966

Cross-site scripting XSS vulnerability in ZK Framework before 5.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in ZK Framework before 5.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-5966

Cross-site scripting XSS vulnerability in ZK Framework before 5.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-5966

CVE-2013-5966 is an XSS vulnerability in ZK Framework before 5.0.13 . The affected product is ZK Framework; the vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The root cause/technical specifics are not provided in the supplied documents beyon...