Skip to content
OpenAdvisories

Vendor

XiaoBingby

4 known vulnerabilities.

Products

3 results · Clear filters · Feed

  • Medium 4.3

    XiaoBingby TeaCMS addUser cross-site request forgery

    A vulnerability classified as problematic was found in XiaoBingby TeaCMS 2.0.2. Affected by this vulnerability is an unknown functionality of the file src/main/java/me/teacms/controller/admin/UserManageController/addUser. The manipulation leads to cross-site …

  • Medium 6.3

    XiaoBingBy TeaCMS getallarticleinfo sql injection

    A vulnerability has been found in XiaoBingBy TeaCMS up to 2.0.2 and classified as critical. This vulnerability affects unknown code of the file /admin/getallarticleinfo. The manipulation of the argument searchInfo leads to sql injection. The attack can be ini…

  • Medium 6.3

    XiaoBingBy TeaCMS upload path traversal

    A vulnerability classified as critical was found in XiaoBingBy TeaCMS 2.0. Affected by this vulnerability is an unknown functionality of the file /admin/upload. The manipulation leads to path traversal: '../filedir'. The attack can be launched remotely. The e…