xxyopen novel-plus 5.1.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:xxyopen:novel-plus:5.1.0:*:*:*:*:*:*:*

part: a version: 5.1.0 update: *

VendorXxyopen (31c30ce2-5774-57c4-9362-92839f121101)
ProductNovel Plus (65481d84-2d8b-5c78-9bd0-3427c7c80b15)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/201206030/novel-plus purl2cpe 2026-06-01 10:13:04.336026

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3856 vulnerable 2026-06-08 07:23:10.029401 xxyopen Novel-Plus searchByPage sql injection
MEDIUM (6.3)
A vulnerability was found in xxyopen Novel-Plus 5.1.0. It has been classified as critical. This affects the function searchByPage of the file /book/searchByPage. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-04-22T01:00:11.753Z
Updated: 2025-04-22T02:00:13.852Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3369 vulnerable 2026-06-08 07:23:08.745393 xxyopen Novel-Plus list sql injection
MEDIUM (6.3)
A vulnerability was found in xxyopen Novel-Plus 5.1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /novel/friendLink/list. The manipulation of the argument sort leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-04-07T13:31:04.801Z
Updated: 2025-04-07T13:53:30.974Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.