Xxyopen

Novel-plus

50 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.8

CVE-2023-7171

Exploit
  • EPSS 0.1%
  • Veröffentlicht 29.12.2023 18:15:39
  • Zuletzt bearbeitet 21.11.2024 08:45:25

A vulnerability was found in Novel-Plus up to 4.2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file novel-admin/src/main/java/com/java2nb/novel/controller/FriendLinkController.java of the c...

5.4

CVE-2023-7166

Exploit
  • EPSS 0.13%
  • Veröffentlicht 29.12.2023 09:15:09
  • Zuletzt bearbeitet 21.11.2024 08:45:25

A vulnerability classified as problematic has been found in Novel-Plus up to 4.2.0. This affects an unknown part of the file /user/updateUserInfo of the component HTTP POST Request Handler. The manipulation of the argument nickName leads to cross sit...

9.8

CVE-2023-46981

Exploit
  • EPSS 1.02%
  • Veröffentlicht 05.11.2023 00:15:08
  • Zuletzt bearbeitet 21.11.2024 08:29:35

SQL injection vulnerability in Novel-Plus v.4.2.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in /common/log/list.

7.2

CVE-2023-41443

Exploit
  • EPSS 0.89%
  • Veröffentlicht 18.09.2023 22:15:47
  • Zuletzt bearbeitet 21.11.2024 08:21:12

SQL injection vulnerability in Novel-Plus v.4.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in /sys/menu/list.

9.8

CVE-2023-30058

Exploit
  • EPSS 0.09%
  • Veröffentlicht 11.09.2023 16:15:07
  • Zuletzt bearbeitet 21.11.2024 07:59:45

novel-plus 3.6.2 is vulnerable to SQL Injection.

9.8

CVE-2023-37847

  • EPSS 0.3%
  • Veröffentlicht 14.08.2023 12:15:09
  • Zuletzt bearbeitet 01.08.2025 02:09:57

novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability.

8.8

CVE-2023-2041

Exploit
  • EPSS 0.05%
  • Veröffentlicht 14.04.2023 09:15:07
  • Zuletzt bearbeitet 21.11.2024 07:57:49

A vulnerability classified as critical was found in novel-plus 3.6.2. Affected by this vulnerability is an unknown functionality of the file /category/list?limit=10&offset=0&order=desc. The manipulation of the argument sort leads to sql injection. Th...

8.8

CVE-2023-2040

Exploit
  • EPSS 0.05%
  • Veröffentlicht 14.04.2023 09:15:07
  • Zuletzt bearbeitet 21.11.2024 07:57:48

A vulnerability classified as critical has been found in novel-plus 3.6.2. Affected is an unknown function of the file /news/list?limit=10&offset=0&order=desc. The manipulation of the argument sort leads to sql injection. It is possible to launch the...

8.8

CVE-2023-2039

Exploit
  • EPSS 0.05%
  • Veröffentlicht 14.04.2023 08:15:07
  • Zuletzt bearbeitet 21.11.2024 07:57:48

A vulnerability was found in novel-plus 3.6.2. It has been rated as critical. This issue affects some unknown processing of the file /author/list?limit=10&offset=0&order=desc. The manipulation of the argument sort leads to sql injection. The attack m...

8.8

CVE-2023-1607

Exploit
  • EPSS 0.06%
  • Veröffentlicht 23.03.2023 20:15:14
  • Zuletzt bearbeitet 21.11.2024 07:39:31

A vulnerability was found in novel-plus 3.6.2. It has been classified as critical. This affects an unknown part of the file /common/sysFile/list. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remo...