springboot-manager
by aitangbao
CVEs (10)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-24062 | Med | 0.35 | 5.4 | 0.00 | Feb 1, 2024 | springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sys/role. | ||
| CVE-2024-24061 | Med | 0.35 | 5.4 | 0.00 | Feb 1, 2024 | springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sysContent/add. | ||
| CVE-2024-24060 | Med | 0.35 | 5.4 | 0.00 | Feb 1, 2024 | springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sys/user. | ||
| CVE-2024-24059 | Med | 0.35 | 5.4 | 0.00 | Feb 1, 2024 | springboot-manager v1.6 is vulnerable to Arbitrary File Upload. The system does not filter the suffixes of uploaded files. | ||
| CVE-2025-2211 | Low | 0.16 | 2.4 | 0.00 | Mar 11, 2025 | A vulnerability was found in aitangbao springboot-manager 3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /sysDictDetail/add. The manipulation of the argument name leads to cross site scripting. The attack may be launched… | ||
| CVE-2025-2210 | Low | 0.16 | 2.4 | 0.00 | Mar 11, 2025 | A vulnerability has been found in aitangbao springboot-manager 3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /sysJob/add. The manipulation of the argument name leads to cross site scripting. The attack can be launched… | ||
| CVE-2025-2209 | Low | 0.16 | 2.4 | 0.00 | Mar 11, 2025 | A vulnerability, which was classified as problematic, was found in aitangbao springboot-manager 3.0. Affected is an unknown function of the file /sysDict/add. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The… | ||
| CVE-2025-2208 | Low | 0.16 | 2.4 | 0.01 | Mar 11, 2025 | A vulnerability, which was classified as problematic, has been found in aitangbao springboot-manager 3.0. This issue affects some unknown processing of the file /sysFiles/upload of the component Filename Handler. The manipulation of the argument name leads to cross site… | ||
| CVE-2025-2207 | Low | 0.16 | 2.4 | 0.01 | Mar 11, 2025 | A vulnerability classified as problematic was found in aitangbao springboot-manager 3.0. This vulnerability affects unknown code of the file /sys/dept. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been… | ||
| CVE-2025-2206 | Low | 0.16 | 2.4 | 0.01 | Mar 11, 2025 | A vulnerability classified as problematic has been found in aitangbao springboot-manager 3.0. This affects an unknown part of the file /sys/permission. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The… |
- risk 0.35cvss 5.4epss 0.00
springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sys/role.
- risk 0.35cvss 5.4epss 0.00
springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sysContent/add.
- risk 0.35cvss 5.4epss 0.00
springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sys/user.
- risk 0.35cvss 5.4epss 0.00
springboot-manager v1.6 is vulnerable to Arbitrary File Upload. The system does not filter the suffixes of uploaded files.
- risk 0.16cvss 2.4epss 0.00
A vulnerability was found in aitangbao springboot-manager 3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /sysDictDetail/add. The manipulation of the argument name leads to cross site scripting. The attack may be launched…
- risk 0.16cvss 2.4epss 0.00
A vulnerability has been found in aitangbao springboot-manager 3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /sysJob/add. The manipulation of the argument name leads to cross site scripting. The attack can be launched…
- risk 0.16cvss 2.4epss 0.00
A vulnerability, which was classified as problematic, was found in aitangbao springboot-manager 3.0. Affected is an unknown function of the file /sysDict/add. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The…
- risk 0.16cvss 2.4epss 0.01
A vulnerability, which was classified as problematic, has been found in aitangbao springboot-manager 3.0. This issue affects some unknown processing of the file /sysFiles/upload of the component Filename Handler. The manipulation of the argument name leads to cross site…
- risk 0.16cvss 2.4epss 0.01
A vulnerability classified as problematic was found in aitangbao springboot-manager 3.0. This vulnerability affects unknown code of the file /sys/dept. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been…
- risk 0.16cvss 2.4epss 0.01
A vulnerability classified as problematic has been found in aitangbao springboot-manager 3.0. This affects an unknown part of the file /sys/permission. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The…