bookstore电商书城系统说明 vulnerabilities

2 known vulnerabilities in bookstore电商书城系统说明 from Donglight. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  bookstore电商书城系统说明: Unrestricted Upload of File with Dangerous Type

  CVE-2024-13210Jan 9, 2025Donglight

  A vulnerability was found in donglight bookstore电商书城系统说明 1.0. It has been declared as critical. Affected by this vulnerability is the function uploadPicture of the file src/main/java/org/zdd/bookstore/web/controller/admin/AdminBookController. java. The manipul

• 9.8 Critical severity

  bookstore电商书城系统说明: Server-Side Request Forgery

  CVE-2024-13195Jan 9, 2025Donglight

  A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been classified as critical. This affects the function getHtml of the file src/main/java/org/zdd/bookstore/rawl/HttpUtil.java. The manipulation of the argument url leads to server-side requ