CVE-2024-13197

The CVE-2024-13197 issue affects the donglight bookstore e-commerce system (version 1.0.0). The vulnerability lies in the updateUser function of AdminUserControlle.java (Admin controller) and is caused by input handling/manipulation that enables cross-site scripting. It can be exploited remotely,...

CVE-2024-13195

The CVE-2024-13195 affects donglight bookstore system (version 1.0.0) and targets the getHtml function in src/main/java/org/zdd/bookstore/rawl/HttpUtil.java. Manipulating the url argument permits server-side request forgery (SSRF), enabling remote exploitation. The advisory notes that the exploit...

CVE-2024-13210

The CVE affects donglight bookstore系统说明 1.0. The vulnerability is in function uploadPicture of AdminBookController.java (pictureFile) and allows unrestricted file uploads. It can be exploited remotely, and the exploit has been disclosed publicly. No remediation details are provided in the supplie...

CVE-2024-13196

The CVE-2024-13196 issue affects donglight bookstore system 1.0.0, specifically the BookSearchList function in src/main/java/org/zdd/bookstore/web/controller/BookInfoController.java. The vulnerability is a cross-site scripting flaw caused by manipulation of the keywords parameter, enabling remote...