Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: SysJust Component: Syuan-gu-da-shin Clear all filters
TI-2020-03439 CVE-2020-3939 · GHSA-w63w-793r-vxg5

SysJust Syuan-Gu-Da-Shih -Cross-Site Scripting(XSS)

Priority LOW 28

SysJust Syuan-Gu-Da-Shih, versions before 20191223, contain vulnerability of Cross-Site Scripting(XSS), personal information may be leaked to attackers via the vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00699 Published 2020-02-04 No fix listed CWE-79
TI-2020-03438 CVE-2020-3938 · GHSA-2ff4-qhx5-wwhw

SysJust Syuan-Gu-Da-Shih -Request-Forgery

Priority MEDIUM 45

SysJust Syuan-Gu-Da-Shih, versions before 20191223, contain vulnerability of Request Forgery, allowing attackers to launch inquiries into network architecture or system files of the server via forged inquests.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01481 Published 2020-02-04 No fix listed CWE-918
TI-2020-03437 CVE-2020-3937 · GHSA-v4ff-5p6c-h76r

SysJust Syuan-Gu-Da-Shih-SQL injection

Priority LOW 38

SQL Injection in SysJust Syuan-Gu-Da-Shih, versions before 20191223, allowing attackers to perform unwanted SQL queries and access arbitrary file in the database.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01375 Published 2020-02-04 No fix listed CWE-89