Skip to content
OpenAdvisories

Product · ContiNew

Admin

2 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 4.7

    ContiNew Admin tree sql injection

    A vulnerability classified as critical was found in ContiNew Admin 3.2.0. Affected by this vulnerability is the function top.continew.starter.extension.crud.controller.BaseController#tree of the file /api/system/dept/tree?sort=parentId%2Casc&sort=sort%2Casc. …

  • Medium 4.7

    ContiNew Admin user sql injection

    A vulnerability was found in ContiNew Admin 3.2.0 and classified as critical. Affected by this issue is the function top.continew.starter.extension.crud.controller.BaseController#page of the file /api/system/user?deptId=1&page=1&size=10. The manipulation of t…