Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
XxyopenNovel-plus3.6.2

11 matches found

CVE
CVE•added 2022/09/01 3:15 a.m.•310 views

CVE-2022-36671

Novel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the background file download API.

7.5CVSS7.6AI score0.00095EPSS
CVE
CVE•added 2022/09/01 3:15 a.m.•293 views

CVE-2022-36672

Novel-Plus v3.6.2 was discovered to contain a hard-coded JWT key located in the project config file. This vulnerability allows attackers to create a custom user session.

9.8CVSS9.2AI score0.00155EPSS
CVE
CVE•added 2023/03/23 8:15 p.m.•93 views

CVE-2023-1607

A vulnerability was found in novel-plus 3.6.2. It has been classified as critical. This affects an unknown part of the file /common/sysFile/list. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

8.8CVSS6.9AI score0.00058EPSS
CVE
CVE•added 2023/04/14 8:15 a.m.•92 views

CVE-2023-2039

A vulnerability was found in novel-plus 3.6.2. It has been rated as critical. This issue affects some unknown processing of the file /author/list?limit=10&offset=0&order=desc. The manipulation of the argument sort leads to sql injection. The attack may be initiated remotely. The exploit has been di...

8.8CVSS7.7AI score0.00053EPSS
CVE
CVE•added 2023/04/14 9:15 a.m.•90 views

CVE-2023-2041

A vulnerability classified as critical was found in novel-plus 3.6.2. Affected by this vulnerability is an unknown functionality of the file /category/list?limit=10&offset=0&order=desc. The manipulation of the argument sort leads to sql injection. The attack can be launched remotely. The exploit ha...

8.8CVSS7.8AI score0.00053EPSS
CVE
CVE•added 2023/03/23 10:15 a.m.•87 views

CVE-2023-1594

A vulnerability, which was classified as critical, was found in novel-plus 3.6.2. Affected is the function MenuService of the file sys/menu/list. The manipulation of the argument sort leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public ...

9.8CVSS8.8AI score0.00249EPSS
CVE
CVE•added 2023/03/23 11:15 a.m.•86 views

CVE-2023-1595

A vulnerability has been found in novel-plus 3.6.2 and classified as critical. Affected by this vulnerability is an unknown functionality of the file common/log/list. The manipulation of the argument sort leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to...

7.2CVSS6.1AI score0.00163EPSS
CVE
CVE•added 2023/03/23 7:15 p.m.•42 views

CVE-2023-1606

A vulnerability was found in novel-plus 3.6.2 and classified as critical. Affected by this issue is some unknown functionality of the file DictController.java. The manipulation of the argument orderby leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

9.8CVSS8.3AI score0.00101EPSS
CVE
CVE•added 2023/04/14 9:15 a.m.•38 views

CVE-2023-2040

A vulnerability classified as critical has been found in novel-plus 3.6.2. Affected is an unknown function of the file /news/list?limit=10&offset=0&order=desc. The manipulation of the argument sort leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed ...

8.8CVSS7.8AI score0.00053EPSS
CVE
CVE•added 2023/08/14 12:15 p.m.•35 views

CVE-2023-37847

novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability.

9.8CVSS9.8AI score0.00302EPSS
CVE
CVE•added 2023/09/11 4:15 p.m.•29 views

CVE-2023-30058

novel-plus 3.6.2 is vulnerable to SQL Injection.

9.8CVSS9.6AI score0.00067EPSS