Skip to content201206030 Novel-plus vulnerabilities
- 201206030 novel-plusnovel-plus through 5.3.3 Missing Authorization on the Admin Book Download EndpointCVE-2026-909415.3 Medium
- 201206030 novel-plusnovel-plus through 5.3.3 Default Cache Management Password in the Front PortalCVE-2026-909406.9 Medium
- 201206030 novel-plusnovel-plus through 5.3.3 Missing Authorization on the Admin /sys/user/list EndpointCVE-2026-909397.1 High
- 201206030 novel-plusxxyopen/201206030 novel-plus User Management Module UserMapper.xml list sql injectionCVE-2025-65355.3 Medium
- 201206030 novel-plusxxyopen/201206030 novel-plus File FileController.java remove resource injectionCVE-2025-65342.3 Low
- 201206030 novel-plusxxyopen/201206030 novel-plus CATCHA LoginController.java ajaxLogin authentication replayCVE-2025-65336.3 Medium
- 201206030 novel-plus20120630 Novel-Plus GeneratorController.java genCode missing authenticationCVE-2025-40196.9 Medium
- 201206030 novel-plus20120630 Novel-Plus CrawlController.java addCrawlSource missing authenticationCVE-2025-40186.9 Medium
- 201206030 novel-plus20120630 Novel-Plus LogController.java list improper authorizationCVE-2025-40175.3 Medium
- 201206030 novel-plus20120630 Novel-Plus LogController.java deleteIndex improper authorizationCVE-2025-40165.3 Medium
- 201206030 novel-plus20120630 Novel-Plus SessionController.java list missing authenticationCVE-2025-40156.9 Medium
- 201206030 novel-plusxxyopen Novel-Plus searchByPage sql injectionCVE-2025-38565.3 Medium
- 201206030 novel-plusxxyopen Novel-Plus books sql injectionCVE-2025-36765.3 Medium
- 201206030 novel-plusxxyopen Novel-Plus list sql injectionCVE-2025-33695.3 Medium
- 201206030 novel-plusNovel-Plus list sql injectionCVE-2024-09415.5 Medium
- 201206030 novel-plusNovel-Plus list sql injectionCVE-2024-06555.5 Medium
- 201206030 novel-plusNovel-Plus Friendly Link FriendLinkController.java cross site scriptingCVE-2023-71712.4 Low
- 201206030 novel-plusNovel-Plus HTTP POST Request updateUserInfo cross site scriptingCVE-2023-71663.5 Low
- 201206030 novel-plusnovel-plus sql injectionCVE-2023-20416.3 Medium
- 201206030 novel-plusnovel-plus sql injectionCVE-2023-20406.3 Medium
- 201206030 novel-plusnovel-plus sql injectionCVE-2023-20396.3 Medium
- 201206030 novel-plusnovel-plus list sql injectionCVE-2023-16074.7 Medium
- 201206030 novel-plusnovel-plus DictController.java sql injectionCVE-2023-16066.3 Medium
- 201206030 novel-plusnovel-plus list sql injectionCVE-2023-15954.7 Medium
- 201206030 novel-plusnovel-plus list MenuService sql injectionCVE-2023-15947.3 High