Approved changes feed: RSS · Atom
cpe:2.3:a:tad:uploader:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Tad (9f07c2bb-05d4-5fd6-8ef9-6f5140f783c7) |
|---|---|
| Product | Uploader (b661e51f-deaa-5bd4-abf0-9414a9871ecb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-41976 |
vulnerable | 2026-06-08 05:35:21.275182 |
Tad Uploader - Improper Authorization
MEDIUM (5.3)
Tad Uploader edit book list function is vulnerable to authorization bypass, thus remote attackers can use the function to amend the folder names in the book list without logging in.
Published: 2021-10-08T15:15:44.085Z
Updated: 2024-09-17T01:21:37.194Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41567 |
vulnerable | 2026-06-08 05:35:20.745761 |
Tad Uploader - Stored XSS
MEDIUM (6.1)
The new add subject parameter of Tad Uploader view book list function fails to filter special characters. Unauthenticated attackers can remotely inject JavaScript syntax and execute stored XSS attacks.
Published: 2021-10-08T15:15:38.115Z
Updated: 2024-09-16T19:19:19.852Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.