Description
A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been rated as problematic. This issue affects the function updateUser of the file src/main/Java/org/zdd/bookstore/web/controller/admin/AdminUserControlle.java. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| donglight | bookstore电商书城系统说明 | 1.0.0 | — |
References
- VDB-290789 | donglight bookstore电商书城系统说明 AdminUserControlle.java updateUser cross site scripting vdb-entry technical-description
- VDB-290789 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #469772 | donglight bookstore 1.0 Storage XSS third-party-advisory
- https://github.com/donglight/bookstore/issues/13 issue-tracking
- https://github.com/donglight/bookstore/issues/13#issue-2760943787 exploit issue-tracking