Vendors / Jnoj Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now Jnoj records in CISA KEV No Jnoj vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 46
Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file reading via the web/polygon/problem/viewfile?id=1&name=../ substring.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.11302 · Published 2019-10-13 · No fix listed CWE-22
Priority MEDIUM 41
app\modules\polygon\controllers\ProblemController in Jiangnan Online Judge (aka jnoj) 0.8.0 allows arbitrary file upload, as demonstrated by PHP code (with a .php filename but the image/png content type) to the web/polyg…
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01494 · Published 2019-10-10 · No fix listed CWE-434
Priority LOW 36
Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file deletion via the web/polygon/problem/deletefile?id=1&name=../ substring.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01641 · Published 2019-10-13 · No fix listed CWE-22
Priority LOW 29
Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[sample_input] parameter to web/admin/problem/create or web/polygon/problem/update.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01068 · Published 2019-10-10 · No fix listed CWE-79
Priority LOW 29
Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[description] parameter to web/admin/problem/create or web/polygon/problem/update.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01058 · Published 2019-10-10 · No fix listed CWE-79
Priority LOW 29
Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[title] parameter to web/polygon/problem/create or web/polygon/problem/update or web/admin/problem/create.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01058 · Published 2019-10-10 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 3 3 0 0
THREATIST.IORead the docs