TI-2025-07511 CVE-2025-8211 · GHSA-r48x-cv83-x3mq
Roothub SystemConfigAdminController.java edit cross site scripting
Priority MEDIUM 56
A vulnerability was found in Roothub up to 2.6.
Vulnerabilities
6 records
TI-2024-21949 CVE-2024-33124 · GHSA-vxmv-r24r-j66w
Roothub v2.6 was discovered to contain a SQL injection vulnerability via the nodeTitle…
Priority MEDIUM 49
Roothub v2.6 was discovered to contain a SQL injection vulnerability via the nodeTitle parameter in the parentNode() function..
TI-2024-21948 CVE-2024-33122 · GHSA-63pv-p59f-jpr4
Roothub v2.6 was discovered to contain a SQL injection vulnerability via the topic parameter in the list() function.
Priority LOW 28
Roothub v2.6 was discovered to contain a SQL injection vulnerability via the topic parameter in the list() function.
TI-2024-21946 CVE-2024-33120 · GHSA-3wvq-9p67-m439
Roothub v2.5 was discovered to contain an arbitrary file upload vulnerability via the…
Priority MEDIUM 50
Roothub v2.5 was discovered to contain an arbitrary file upload vulnerability via the customPath parameter in the upload() function.
TI-2024-21947 CVE-2024-33121 · GHSA-jvfj-c7wv-mq45
Roothub v2.6 was discovered to contain a SQL injection vulnerability via the 's' parameter in the search() function.
Priority LOW 28
Roothub v2.6 was discovered to contain a SQL injection vulnerability via the 's' parameter in the search() function.
TI-2022-10878 CVE-2022-28052 · GHSA-54v4-2rmr-fh34
Directory Traversal vulnerability in file cn/roothub/store/FileSystemStorageService in…
Priority MEDIUM 40
Directory Traversal vulnerability in file cn/roothub/store/FileSystemStorageService in function store in Roothub 2.6.0 allows remote attackers with low privlege to arbitrarily upload files via /common/upload API, which c…