Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2024-35081

LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter in the fileDownload method.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Luckyframe
Products
Luckyframeweb
CVE-2024-33118

LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary read vulnerability via the fileDownload method in class com.luckyframe.project.common.CommonController.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Luckyframe
Products
Luckyframeweb
CVE-2023-24221

LuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /system/DeptMapper.xml.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Luckyframe
Products
Luckyframeweb
CVE-2023-24220

LuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /system/RoleMapper.xml.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Luckyframe
Products
Luckyframeweb
CVE-2023-24219

LuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /system/UserMapper.xml.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Luckyframe
Products
Luckyframeweb