Skip to content
OpenAdvisories

Product · Jalios

JPlatform

3 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.6

    Jalios JPlatform 10 SP6 < 10.0.6 Record Chooser SQL Injection

    The DB chooser functionality in Jalios JPlatform 10 SP6 before 10.0.6 improperly neutralizes special elements used in an SQL command allows for unauthenticated users to trigger SQL Injection. This issue affects JPlatform before 10.0.6 and a PatchPlugin releas…

  • High 7.3

    Jalios JPlatform 10 Multiple Cross-Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability in Jalios JPlatform 10 allows for Reflected XSS and Stored XSS.This issue affects JPlatform 10: before 10.0.8 (SP8), before 10.0.7 (SP7), before 10.0.6 (SP6) and Ja…