Lucene search

Framework Security Vulnerabilities

cve

CVE-2020-7989

Adive Framework 2.0.8 has admin/user/add userUsername XSS.

6.1CVSS

6.3AI Score

0.002EPSS

2020-01-26 10:15 PM

cve

CVE-2020-7990

Adive Framework 2.0.8 has admin/user/add userName XSS.

6.1CVSS

6.3AI Score

0.002EPSS

2020-01-26 10:15 PM

cve

CVE-2020-7991

Adive Framework 2.0.8 has admin/config CSRF to change the Administrator password.

8.8CVSS

8.6AI Score

0.006EPSS

2020-01-26 10:15 PM

112

cve

CVE-2024-4336

Adive Framework 2.0.8, does not sufficiently encode user-controlled inputs, resulting in a persistent Cross-Site Scripting (XSS) vulnerability via the /adive/admin/tables/add, in multiple parameters. An attacker could retrieve the session details of an authenticated user.

7.6CVSS

5.7AI Score

0.0004EPSS

2024-04-30 10:15 AM

cve

CVE-2024-4337

Adive Framework 2.0.8, does not sufficiently encode user-controlled inputs, resulting in a persistent Cross-Site Scripting (XSS) vulnerability via the /adive/admin/nav/add, in multiple parameters. This vulnerability allows an attacker to retrieve the session details of an authenticated user.

7.6CVSS

5.6AI Score

0.0004EPSS

2024-04-30 10:15 AM