Skip to content
Xxyopen vulnerabilities
Newest
-
201206030 novel
xxyopen/201206030 novel Book Chapter Read BookServiceImpl.java getBookChapter authorization
CVE-2026-123677
5.3 Medium
-
201206030 novel
xxyopen/201206030 novel Book Content Service BookServiceImpl.java BookServiceImpl.getBookContentAbout improper authorization
CVE-2026-123676
6.9 Medium
-
201206030 novel
novel through 3.5.0 Unsalted MD5 Password Storage
CVE-2026-110104
8.2 High
-
xxyopen novel
DOM-based Cross-Site Scripting (XSS) vulnerability in 201206030 novel V3.5.0 allows remote...
CVE-2025-65442
Public exploit
6.1 Medium
-
xxyopen novel-plus
Novel-Plus with 5.2.0 was discovered to contain a Stored Cross-Site Scripting (XSS) vulnerability...
CVE-2025-60299
5.4 Medium
-
xxyopen novel-plus
Novel-Plus up to 5.2.4 was discovered to contain a Stored Cross-Site Scripting (XSS)...
CVE-2025-60298
5.4 Medium
-
201206030 novel-plus
xxyopen/201206030 novel-plus User Management Module UserMapper.xml list sql injection
CVE-2025-6535
5.3 Medium
-
201206030 novel-plus
xxyopen/201206030 novel-plus File FileController.java remove resource injection
CVE-2025-6534
2.3 Low
-
201206030 novel-plus
xxyopen/201206030 novel-plus CATCHA LoginController.java ajaxLogin authentication replay
CVE-2025-6533
6.3 Medium
-
xxyopen novel-plus
Directory Traversal vulnerability in novel plus before v.5.1.0 allows a remote attacker to...
CVE-2025-45890
9.8 Critical
-
201206030 novel
201206030 Novel Chapter AuthorController.java updateBookChapter access control
CVE-2025-4036
5.3 Medium
-
201206030 novel-plus
20120630 Novel-Plus GeneratorController.java genCode missing authentication
CVE-2025-4019
6.9 Medium
-
201206030 novel-plus
20120630 Novel-Plus CrawlController.java addCrawlSource missing authentication
CVE-2025-4018
6.9 Medium
-
201206030 novel-plus
20120630 Novel-Plus LogController.java list improper authorization
CVE-2025-4017
5.3 Medium
-
201206030 novel-plus
20120630 Novel-Plus LogController.java deleteIndex improper authorization
CVE-2025-4016
5.3 Medium
-
201206030 novel-plus
20120630 Novel-Plus SessionController.java list missing authentication
CVE-2025-4015
6.9 Medium
-
201206030 novel-cloud
201206030 novel-cloud BookInfoMapper.xml RestResp sql injection
CVE-2025-3956
5.3 Medium
-
201206030 novel-plus
xxyopen Novel-Plus searchByPage sql injection
CVE-2025-3856
5.3 Medium
-
201206030 novel-plus
xxyopen Novel-Plus books sql injection
CVE-2025-3676
5.3 Medium
-
201206030 novel-plus
xxyopen Novel-Plus list sql injection
CVE-2025-3369
5.3 Medium
-
xxyopen novel-plus
An issue in xxyopen novel plus v.4.4.0 and before allows a remote attacker to execute arbitrary...
CVE-2025-26182
6.5 Medium
-
201206030 novel
xxyopen Novel books sql injection
CVE-2025-1154
5.3 Medium
-
novel-plus
Arbitrary File Read vulnerability in novel-plus 4.3.0 and before allows a remote attacker to...
CVE-2024-33383
7.5 High
-
novel-plus
An arbitrary file upload vulnerability in the component /sysFile/upload of Novel-Plus v4.3.0-RC1...
CVE-2024-25274
9.8 Critical
-
xxyopen novel-plus
An arbitrary File upload vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions at com...
CVE-2024-24026
9.8 Critical
-
xxyopen novel-plus
An arbitrary File upload vulnerability exists in Novel-Plus v4.3.0-RC1 and prior at com.java2nb...
CVE-2024-24025
9.8 Critical
-
xxyopen novel-plus
An arbitrary File download vulnerability exists in Novel-Plus v4.3.0-RC1 and prior at com.java2nb...
CVE-2024-24024
9.8 Critical
-
xxyopen novel-plus
A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior. An attacker can pass...
CVE-2024-24023
9.8 Critical
-
xxyopen novel-plus
A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior. An attacker can pass...
CVE-2024-24021
9.8 Critical
-
xxyopen novel-plus
A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can...
CVE-2024-24018
9.8 Critical
-
novel-plus
A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can...
CVE-2024-24017
9.8 Critical
-
xxyopen novel-plus
A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can...
CVE-2024-24014
9.8 Critical
-
xxyopen novel-plus
A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can...
CVE-2024-24019
9.8 Critical
-
xxyopen novel-plus
A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can...
CVE-2024-24015
9.8 Critical
-
xxyopen novel-plus
A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can...
CVE-2024-24013
9.8 Critical
-
201206030 novel-plus
Novel-Plus list sql injection
CVE-2024-0941
5.5 Medium
-
201206030 novel-plus
Novel-Plus list sql injection
CVE-2024-0655
5.5 Medium
-
201206030 novel-plus
Novel-Plus Friendly Link FriendLinkController.java cross site scripting
CVE-2023-7171
2.4 Low
-
201206030 novel-plus
Novel-Plus HTTP POST Request updateUserInfo cross site scripting
CVE-2023-7166
3.5 Low
-
xxyopen novel-plus
SQL injection vulnerability in Novel-Plus v.4.2.0 allows a remote attacker to execute arbitrary...
CVE-2023-46981
9.8 Critical
-
xxyopen novel-plus
SQL injection vulnerability in Novel-Plus v.4.1.0 allows a remote attacker to execute arbitrary...
CVE-2023-41443
7.2 High
-
xxyopen novel-plus
novel-plus 3.6.2 is vulnerable to SQL Injection.
CVE-2023-30058
9.8 Critical
-
xxyopen novel-plus
novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability.
CVE-2023-37847
9.8 Critical
-
201206030 novel-plus
novel-plus sql injection
CVE-2023-2041
6.3 Medium
-
201206030 novel-plus
novel-plus sql injection
CVE-2023-2040
6.3 Medium
-
201206030 novel-plus
novel-plus sql injection
CVE-2023-2039
6.3 Medium
-
201206030 novel-plus
novel-plus list sql injection
CVE-2023-1607
4.7 Medium
-
201206030 novel-plus
novel-plus DictController.java sql injection
CVE-2023-1606
6.3 Medium
-
201206030 novel-plus
novel-plus list sql injection
CVE-2023-1595
4.7 Medium
-
201206030 novel-plus
novel-plus list MenuService sql injection
CVE-2023-1594
7.3 High
- Show olderLoading…