Lucene search

Javaweb Blog Security Vulnerabilities

cve

Cross-Site Scripting (XSS) vulnerability found in Rawchen blog-ssm v1.0 allows attackers to execute arbitrary code via the 'notifyInfo' parameter.

5.4CVSS

5.4AI Score

0.001EPSS

2023-01-23 10:15 PM

cve

An issue discovered in Rawchen blog-ssm v1.0 allows remote attacker to escalate privileges and execute arbitrary commands via the component /upFile.

9.8CVSS

9.8AI Score

0.005EPSS

2023-01-26 09:16 PM