Bookstore电商书城系统说明
Approved changes feed: RSS · Atom
cpe:2.3:a:donglight:bookstore电商书城系统说明:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Donglight (557dc4e9-a11d-5665-8d5c-100f403fc724) |
|---|---|
| Product | Bookstore电商书城系统说明 (0cfa93fc-34c6-5f68-bb7d-7b1d6b0be658) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-13210 |
vulnerable | 2026-06-08 06:25:36.971858 |
donglight bookstore电商书城系统说明 AdminBookController. java uploadPicture unrestricted upload
MEDIUM (4.7)
A vulnerability was found in donglight bookstore电商书城系统说明 1.0. It has been declared as critical. Affected by this vulnerability is the function uploadPicture of the file src/main/java/org/zdd/bookstore/web/controller/admin/AdminBookController. java. The manipulation of the argument pictureFile leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-01-09T03:31:04.605Z
Updated: 2025-01-09T15:47:47.154Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-13197 |
vulnerable | 2026-06-08 06:25:36.942786 |
donglight bookstore电商书城系统说明 AdminUserControlle.java updateUser cross site scripting
LOW (3.5)
A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been rated as problematic. This issue affects the function updateUser of the file src/main/Java/org/zdd/bookstore/web/controller/admin/AdminUserControlle.java. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-01-09T00:00:17.447Z
Updated: 2025-01-09T15:39:51.600Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-13196 |
vulnerable | 2026-06-08 06:25:36.942222 |
donglight bookstore电商书城系统说明 BookInfoController.java BookSearchList cross site scripting
LOW (3.5)
A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been declared as problematic. This vulnerability affects the function BookSearchList of the file src/main/java/org/zdd/bookstore/web/controller/BookInfoController.java. The manipulation of the argument keywords leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-01-09T00:00:15.649Z
Updated: 2025-01-09T16:16:17.775Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-13195 |
vulnerable | 2026-06-08 06:25:36.940719 |
donglight bookstore电商书城系统说明 HttpUtil.java getHtml server-side request forgery
MEDIUM (6.3)
A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been classified as critical. This affects the function getHtml of the file src/main/java/org/zdd/bookstore/rawl/HttpUtil.java. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-01-08T23:31:06.435Z
Updated: 2025-01-09T16:19:46.795Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.