201206030 vulnerabilities

Products

• Novel-plus 25
• Novel 5

Newest

• 201206030 novel xxyopen/201206030 novel Book Chapter Read BookServiceImpl.java getBookChapter authorization CVE-2026-123677 5.3 MediumNovember 6, 2026
• 201206030 novel xxyopen/201206030 novel Book Content Service BookServiceImpl.java BookServiceImpl.getBookContentAbout improper authorization CVE-2026-123676 6.9 MediumNovember 6, 2026
• 201206030 novel novel through 3.5.0 Unsalted MD5 Password Storage CVE-2026-110104 8.2 HighOctober 13, 2026
• 201206030 novel-plus novel-plus through 5.3.3 Missing Authorization on the Admin Book Download Endpoint CVE-2026-90941 5.3 MediumSeptember 14, 2026
• 201206030 novel-plus novel-plus through 5.3.3 Default Cache Management Password in the Front Portal CVE-2026-90940 6.9 MediumSeptember 14, 2026
• 201206030 novel-plus novel-plus through 5.3.3 Missing Authorization on the Admin /sys/user/list Endpoint CVE-2026-90939 7.1 HighSeptember 14, 2026
• 201206030 novel-plus xxyopen/201206030 novel-plus User Management Module UserMapper.xml list sql injection CVE-2025-6535 5.3 MediumJune 24, 2025
• 201206030 novel-plus xxyopen/201206030 novel-plus File FileController.java remove resource injection CVE-2025-6534 2.3 LowJune 24, 2025
• 201206030 novel-plus xxyopen/201206030 novel-plus CATCHA LoginController.java ajaxLogin authentication replay CVE-2025-6533 6.3 MediumJune 24, 2025
• 201206030 novel 201206030 Novel Chapter AuthorController.java updateBookChapter access control CVE-2025-4036 5.3 MediumApril 28, 2025
• 201206030 novel-plus 20120630 Novel-Plus GeneratorController.java genCode missing authentication CVE-2025-4019 6.9 MediumApril 28, 2025
• 201206030 novel-plus 20120630 Novel-Plus CrawlController.java addCrawlSource missing authentication CVE-2025-4018 6.9 MediumApril 28, 2025
• 201206030 novel-plus 20120630 Novel-Plus LogController.java list improper authorization CVE-2025-4017 5.3 MediumApril 28, 2025
• 201206030 novel-plus 20120630 Novel-Plus LogController.java deleteIndex improper authorization CVE-2025-4016 5.3 MediumApril 28, 2025
• 201206030 novel-plus 20120630 Novel-Plus SessionController.java list missing authentication CVE-2025-4015 6.9 MediumApril 28, 2025
• 201206030 novel-cloud 201206030 novel-cloud BookInfoMapper.xml RestResp sql injection CVE-2025-3956 5.3 MediumApril 27, 2025
• 201206030 novel-plus xxyopen Novel-Plus searchByPage sql injection CVE-2025-3856 5.3 MediumApril 22, 2025
• 201206030 novel-plus xxyopen Novel-Plus books sql injection CVE-2025-3676 5.3 MediumApril 16, 2025
• 201206030 novel-plus xxyopen Novel-Plus list sql injection CVE-2025-3369 5.3 MediumApril 7, 2025
• 201206030 novel xxyopen Novel books sql injection CVE-2025-1154 5.3 MediumFebruary 10, 2025
• 201206030 novel-plus Novel-Plus list sql injection CVE-2024-0941 5.5 MediumJanuary 26, 2024
• 201206030 novel-plus Novel-Plus list sql injection CVE-2024-0655 5.5 MediumJanuary 18, 2024
• 201206030 novel-plus Novel-Plus Friendly Link FriendLinkController.java cross site scripting CVE-2023-7171 2.4 LowDecember 29, 2023
• 201206030 novel-plus Novel-Plus HTTP POST Request updateUserInfo cross site scripting CVE-2023-7166 3.5 LowDecember 29, 2023
• 201206030 novel-plus novel-plus sql injection CVE-2023-2041 6.3 MediumApril 14, 2023
• 201206030 novel-plus novel-plus sql injection CVE-2023-2040 6.3 MediumApril 14, 2023
• 201206030 novel-plus novel-plus sql injection CVE-2023-2039 6.3 MediumApril 14, 2023
• 201206030 novel-plus novel-plus list sql injection CVE-2023-1607 4.7 MediumMarch 23, 2023
• 201206030 novel-plus novel-plus DictController.java sql injection CVE-2023-1606 6.3 MediumMarch 23, 2023
• 201206030 novel-plus novel-plus list sql injection CVE-2023-1595 4.7 MediumMarch 23, 2023
• 201206030 novel-plus novel-plus list MenuService sql injection CVE-2023-1594 7.3 HighMarch 23, 2023