Wang.Market

Wangmarket

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.8

CVE-2025-15452

Exploit
  • EPSS 0.04%
  • Veröffentlicht 05.01.2026 02:02:09
  • Zuletzt bearbeitet 13.01.2026 20:35:43

A weakness has been identified in xnx3 wangmarket up to 4.9. This affects the function variableList of the file /admin/system/variableList.do of the component Backend Variable Search. Executing a manipulation of the argument Description can lead to c...

4.8

CVE-2025-15451

Exploit
  • EPSS 0.04%
  • Veröffentlicht 05.01.2026 01:32:09
  • Zuletzt bearbeitet 13.01.2026 20:35:30

A security flaw has been discovered in xnx3 wangmarket up to 4.9. Affected by this issue is some unknown functionality of the file /admin/system/variableSave.do of the component System Variables Page. Performing a manipulation of the argument Descrip...

5.4

CVE-2025-15416

Exploit
  • EPSS 0.03%
  • Veröffentlicht 01.01.2026 22:32:06
  • Zuletzt bearbeitet 12.01.2026 18:08:00

A vulnerability was found in xnx3 wangmarket up to 6.4. This affects an unknown function of the file /siteVar/save.do of the component Add Global Variable Handler. The manipulation of the argument Remark/Variable Value results in cross site scripting...

5.4

CVE-2025-15415

Exploit
  • EPSS 0.03%
  • Veröffentlicht 01.01.2026 22:15:42
  • Zuletzt bearbeitet 12.01.2026 18:03:26

A vulnerability has been found in xnx3 wangmarket up to 6.4. The impacted element is the function uploadImage of the file /sits/uploadImage.do of the component XML File Handler. The manipulation of the argument image leads to unrestricted upload. Rem...

8

CVE-2025-25769

  • EPSS 0.04%
  • Veröffentlicht 21.02.2025 19:15:14
  • Zuletzt bearbeitet 28.03.2025 20:08:22

Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /controller/UserController.java.

6.8

CVE-2025-25770

Exploit
  • EPSS 0.05%
  • Veröffentlicht 21.02.2025 19:15:14
  • Zuletzt bearbeitet 28.03.2025 20:07:33

Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /agency/AgencyUserController.java.

9.8

CVE-2023-6886

  • EPSS 0.06%
  • Veröffentlicht 17.12.2023 01:15:27
  • Zuletzt bearbeitet 21.11.2024 08:44:45

A vulnerability was found in xnx3 wangmarket 6.1. It has been rated as critical. Affected by this issue is some unknown functionality of the component Role Management Page. The manipulation leads to code injection. The attack may be launched remotely...

9.8

CVE-2023-26813

Exploit
  • EPSS 0.32%
  • Veröffentlicht 28.04.2023 20:15:13
  • Zuletzt bearbeitet 30.01.2026 16:51:29

SQL injection vulnerability in com.xnx3.wangmarket.plugin.dataDictionary.controller.DataDictionaryPluginController.java in wangmarket CMS 4.10 allows remote attackers to run arbitrary SQL commands via the TableName parameter to /plugin/dataDictionary...