donglight bookstore 1.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:donglight:bookstore:1.0.0:*:*:*:*:*:*:*
part: a version: 1.0.0 update: *
| Vendor | Donglight (557dc4e9-a11d-5665-8d5c-100f403fc724) |
|---|---|
| Product | Bookstore (f14ef52e-cc1a-58a5-b414-cd134d7003ed) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/donglight/bookstore |
purl2cpe | 2026-09-15 20:25:02.532404 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-13210 |
vulnerable | 2026-06-08 06:25:36.971902 |
donglight bookstore电商书城系统说明 AdminBookController. java uploadPicture unrestricted upload
MEDIUM (4.7)
A vulnerability was found in donglight bookstore电商书城系统说明 1.0. It has been declared as critical. Affected by this vulnerability is the function uploadPicture of the file src/main/java/org/zdd/bookstore/web/controller/admin/AdminBookController. java. The manipulation of the argument pictureFile leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-01-09T03:31:04.605Z
Updated: 2025-01-09T15:47:47.154Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-13197 |
vulnerable | 2026-06-08 06:25:36.942949 |
donglight bookstore电商书城系统说明 AdminUserControlle.java updateUser cross site scripting
LOW (3.5)
A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been rated as problematic. This issue affects the function updateUser of the file src/main/Java/org/zdd/bookstore/web/controller/admin/AdminUserControlle.java. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-01-09T00:00:17.447Z
Updated: 2025-01-09T15:39:51.600Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-13196 |
vulnerable | 2026-06-08 06:25:36.942277 |
donglight bookstore电商书城系统说明 BookInfoController.java BookSearchList cross site scripting
LOW (3.5)
A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been declared as problematic. This vulnerability affects the function BookSearchList of the file src/main/java/org/zdd/bookstore/web/controller/BookInfoController.java. The manipulation of the argument keywords leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-01-09T00:00:15.649Z
Updated: 2025-01-09T16:16:17.775Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-13195 |
vulnerable | 2026-06-08 06:25:36.941440 |
donglight bookstore电商书城系统说明 HttpUtil.java getHtml server-side request forgery
MEDIUM (6.3)
A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been classified as critical. This affects the function getHtml of the file src/main/java/org/zdd/bookstore/rawl/HttpUtil.java. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-01-08T23:31:06.435Z
Updated: 2025-01-09T16:19:46.795Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.