Skip to content
OpenAdvisories

Vendor

donglight

4 known vulnerabilities.

Products

bookstore电商书城系统说明 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.7
    CVE-2024-13210

    donglight bookstore电商书城系统说明 AdminBookController. java uploadPicture unrestricted upload

    A vulnerability was found in donglight bookstore电商书城系统说明 1.0. It has been declared as critical. Affected by this vulnerability is the function uploadPicture of the file src/main/java/org/zdd/bookstore/web/controller/admin/AdminBookController. java. The manipu…

    donglight bookstore电商书城系统说明
  • Medium 6.3
    CVE-2024-13195

    donglight bookstore电商书城系统说明 HttpUtil.java getHtml server-side request forgery

    A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been classified as critical. This affects the function getHtml of the file src/main/java/org/zdd/bookstore/rawl/HttpUtil.java. The manipulation of the argument url leads to server-side req…

    donglight bookstore电商书城系统说明