Jiangnan Online Judge Security Vulnerabilities and Issues — Jiangnan Online Judge CVE List

Lucene search

JnojJiangnan Online Judge

6 matches found

CVE•added 2019/10/10 9:15 p.m.•99 views

CVE-2019-17490

app\modules\polygon\controllers\ProblemController in Jiangnan Online Judge (aka jnoj) 0.8.0 allows arbitrary file upload, as demonstrated by PHP code (with a .php filename but the image/png content type) to the web/polygon/problem/tests URI.

8.8CVSS8.7AI score0.00423EPSS

CVE•added 2019/10/10 9:15 p.m.•97 views

CVE-2019-17489

Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[title] parameter to web/polygon/problem/create or web/polygon/problem/update or web/admin/problem/create.

6.1CVSS5.9AI score0.00293EPSS

CVE•added 2019/10/10 9:15 p.m.•96 views

CVE-2019-17491

Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[description] parameter to web/admin/problem/create or web/polygon/problem/update.

6.1CVSS5.9AI score0.00293EPSS

CVE•added 2019/10/10 9:15 p.m.•95 views

CVE-2019-17493

Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[sample_input] parameter to web/admin/problem/create or web/polygon/problem/update.

6.1CVSS5.9AI score0.00293EPSS

CVE•added 2019/10/13 7:15 p.m.•94 views

CVE-2019-17538

Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file reading via the web/polygon/problem/viewfile?id=1&name=../ substring.

7.5CVSS7.5AI score0.83822EPSS

CVE•added 2019/10/13 7:15 p.m.•78 views

CVE-2019-17537

Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file deletion via the web/polygon/problem/deletefile?id=1&name=../ substring.

7.5CVSS7.5AI score0.01051EPSS