Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

CVE-2022-46493

Default version of nbnbk was discovered to contain an arbitrary file upload vulnerability via the component /api/User/download_img.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Nbnbk Project
Products
Nbnbk
CVE-2022-46491

A Cross-Site Request Forgery (CSRF) vulnerability in the Add Administrator function of the default version of nbnbk allows attackers to arbitrarily add Administrator accounts.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Nbnbk Project
Products
Nbnbk
CVE-2022-46492

nbnbk commit 879858451d53261d10f77d4709aee2d01c72c301 was discovered to contain an arbitrary file read vulnerability via the component /api/Index/getFileBinary.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Nbnbk Project
Products
Nbnbk
CVE-2022-31386

A Server-Side Request Forgery (SSRF) in the getFileBinary function of nbnbk cms 3 allows attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the URL parameter.

CVSS 3.1 · 9.1 Critical EPSS 1.0% KEV · Not listed
Vendors
Nbnbk Project
Products
Nbnbk