Roothub
by Roothub
CVEs (7)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-33124 | Cri | 0.64 | 9.8 | 0.01 | May 7, 2024 | Roothub v2.6 was discovered to contain a SQL injection vulnerability via the nodeTitle parameter in the parentNode() function.. | ||
| CVE-2024-33120 | Cri | 0.64 | 9.8 | 0.01 | May 7, 2024 | Roothub v2.5 was discovered to contain an arbitrary file upload vulnerability via the customPath parameter in the upload() function. This vulnerability allows attackers to execute arbitrary code via a crafted JSP file. | ||
| CVE-2022-27473 | Cri | 0.64 | 9.8 | 0.01 | Apr 12, 2022 | SQL injection vulnerability in Topics Searching feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via the "s" parameter remotely. | ||
| CVE-2022-28052 | Hig | 0.52 | 8.0 | 0.02 | Apr 13, 2022 | Directory Traversal vulnerability in file cn/roothub/store/FileSystemStorageService in function store in Roothub 2.6.0 allows remote attackers with low privlege to arbitrarily upload files via /common/upload API, which could lead to remote arbitrary code execution. | ||
| CVE-2024-33122 | Med | 0.41 | 6.3 | 0.00 | May 7, 2024 | Roothub v2.6 was discovered to contain a SQL injection vulnerability via the topic parameter in the list() function. | ||
| CVE-2024-33121 | Med | 0.41 | 6.3 | 0.00 | May 6, 2024 | Roothub v2.6 was discovered to contain a SQL injection vulnerability via the 's' parameter in the search() function. | ||
| CVE-2025-8211 | Low | 0.23 | 3.5 | 0.00 | Jul 26, 2025 | A vulnerability was found in Roothub up to 2.6. It has been declared as problematic. Affected by this vulnerability is the function Edit of the file src/main/java/cn/roothub/web/admin/SystemConfigAdminController.java. The manipulation leads to cross site scripting. The attack… |
- risk 0.64cvss 9.8epss 0.01
Roothub v2.6 was discovered to contain a SQL injection vulnerability via the nodeTitle parameter in the parentNode() function..
- risk 0.64cvss 9.8epss 0.01
Roothub v2.5 was discovered to contain an arbitrary file upload vulnerability via the customPath parameter in the upload() function. This vulnerability allows attackers to execute arbitrary code via a crafted JSP file.
- risk 0.64cvss 9.8epss 0.01
SQL injection vulnerability in Topics Searching feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via the "s" parameter remotely.
- risk 0.52cvss 8.0epss 0.02
Directory Traversal vulnerability in file cn/roothub/store/FileSystemStorageService in function store in Roothub 2.6.0 allows remote attackers with low privlege to arbitrarily upload files via /common/upload API, which could lead to remote arbitrary code execution.
- risk 0.41cvss 6.3epss 0.00
Roothub v2.6 was discovered to contain a SQL injection vulnerability via the topic parameter in the list() function.
- risk 0.41cvss 6.3epss 0.00
Roothub v2.6 was discovered to contain a SQL injection vulnerability via the 's' parameter in the search() function.
- risk 0.23cvss 3.5epss 0.00
A vulnerability was found in Roothub up to 2.6. It has been declared as problematic. Affected by this vulnerability is the function Edit of the file src/main/java/cn/roothub/web/admin/SystemConfigAdminController.java. The manipulation leads to cross site scripting. The attack…