CVE-2025-2211

CVE-2025-2211 affects aitangbao springboot-manager 3.0. The vulnerability arises from manipulation of the argument name in the file /sysDictDetail/add, enabling cross-site scripting. The issue is exploitable remotely and an exploit has been disclosed publicly. Other parameters may also be affecte...

CVE-2024-24061

The CVE-2024-24061 entry affects springboot-manager v1.6 and describes a Cross Site Scripting (XSS) vulnerability exposed via the endpoint /sysContent/add . The root cause in the available documents is not explicitly detailed beyond the XSS finding; the NVD/CVE metrics list a Medium impact (CVSS ...

CVE-2025-2209

The CVE-2025-2209 entry concerns aitangbao springboot-manager 3.0. Affected is an unknown function of the file /sysDict/add where manipulation of the argument name leads to cross-site scripting. The vulnerability is remotely exploitable, and the exploit has been disclosed publicly. Multiple feeds...

CVE-2025-2210

CVE-2025-2210 affects aitangbao springboot-manager 3.0. The vulnerability is an XSS in an unknown function of /sysJob/add triggered by manipulating the argument name. It can be exploited remotely and exploits have been disclosed publicly. Other parameters may be affected as well. The vendor was c...

CVE-2025-2207

CVE-2025-2207 affects aitangbao springboot-manager 3.0. The vulnerability arises from manipulation of the argument name in code handling /sys/dept, resulting in cross-site scripting. The attack can be initiated remotely and the exploit has been disclosed publicly. Other parameters may also be aff...

CVE-2024-24062

CVE-2024-24062 affects springboot-manager v1.6; it is vulnerable to Cross Site Scripting (XSS) via the /sys/role endpoint. This is the explicit vulnerability described in multiple feeds. The NVD/CVE notes an XSS risk with base score 5.4 (Medium). Some sources (e.g., PT-2024-20261) describe the is...

CVE-2025-2208

CVE-2025-2208 affects aitangbao springboot-manager 3.0, specifically a vulnerability in the Filename Handler that processes the file at /sysFiles/upload. The issue arises from manipulation of the argument name, enabling cross-site scripting. It can be exploited remotely, and public exploits have ...

CVE-2024-24059

Springboot-manager v1.6 is affected by an Arbitrary File Upload vulnerability caused by not filtering uploaded file suffixes. The reports consistently describe this as the root cause and outline the resulting security impact as arbitrary file upload with low confidentiality/integrity impact and n...

CVE-2025-2206

Summary of CVE-2025-2206 (aitangbao springboot-manager 3.0) A vulnerability exists in aitangbao springboot-manager version 3.0 involving the file /sys/permission. The issue arises from manipulation of the name argument, which leads to cross-site scripting. The attack can be initiated remotely and...

CVE-2024-24060

The CVE-2024-24060 entry concerns springboot-manager v1.6, with a reported Cross Site Scripting (XSS) vulnerability via the /sys/user endpoint. The connected data confirms the affected software/version and the underlying issue being an XSS flaw, but does not provide a published fixed version. The...