Filtered by vendor Heyewei Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-8782 2 Heyewei, Jfinalcms Project 2 Jfinalcms, Jfinalcms 2024-09-19 6.3 Medium
A vulnerability was found in JFinalCMS up to 1.0. It has been rated as critical. This issue affects the function delete of the file /admin/template/edit. The manipulation of the argument name leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-6539 1 Heyewei 1 Springbootcms 2024-08-01 3.5 Low
A vulnerability classified as problematic has been found in heyewei SpringBootCMS up to 2024-05-28. Affected is an unknown function of the file /guestbook of the component Guestbook Handler. The manipulation of the argument Content leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-270450 is the identifier assigned to this vulnerability.