Approved changes feed: RSS · Atom

cpe:2.3:a:xxyopen:novel-plus:4.1.0:*:*:*:*:*:*:*

part: a version: 4.1.0 update: *

VendorXxyopen (31c30ce2-5774-57c4-9362-92839f121101)
ProductNovel Plus (65481d84-2d8b-5c78-9bd0-3427c7c80b15)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/201206030/novel-plus purl2cpe 2026-06-01 10:13:04.336018

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-41443 vulnerable 2026-06-08 06:11:06.108721 Details available
SQL injection vulnerability in Novel-Plus v.4.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in /sys/menu/list.
Published: 2023-09-18T00:00:00.000Z
Updated: 2024-09-25T17:26:14.397Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.