Lucene search

Dwsurvey Security Vulnerabilities - 2023

cve

CVE-2020-20070

Cross Site Scripting vulnerability found in wkeyuan DWSurvey 1.0 allows a remote attacker to execute arbitrary code via thequltemld parameter of the qu-multi-fillblank!answers.action file.

6.1CVSS

6.4AI Score

0.001EPSS

2023-06-20 03:15 PM

cve

CVE-2023-40980

File Upload vulnerability in DWSurvey DWSurvey-OSS v.3.2.0 and before allows a remote attacker to execute arbitrary code via the saveimage method and savveFile in the action/UploadAction.java file.

9.8CVSS

9.6AI Score

0.003EPSS

2023-09-01 04:15 PM