Vulnerabilities

A vulnerability was found in xxyopen/201206030 novel up to 3.5.0.

A vulnerability has been found in xxyopen/201206030 novel up to 3.5.0.

Xxyopen novel through 3.5.0 contains a weak password hashing vulnerability that allows attackers to recover plaintext passwords because UserServiceImpl.register() stores unsalted MD5 digests in user_info.password.

novel-plus through 5.3.3 contains an authorization bypass vulnerability in the BookController download endpoint that allows authenticated backend accounts to export complete book text including paid chapters.

novel-plus through 5.3.3 contains an insecure default cache-management password in the CacheController.refreshCache endpoint that allows anonymous attackers to invalidate portal caches by supplying the hardcoded default…

novel-plus through 5.3.3 contains an information disclosure vulnerability in the /sys/user/list endpoint that lacks proper permission annotations.

DOM-based Cross-Site Scripting (XSS) vulnerability in 201206030 novel V3.5.0 allows remote attackers to execute arbitrary JavaScript code or disclose sensitive information (e.g., user session cookies) via a crafted "wvst…

Novel-Plus with 5.2.0 was discovered to contain a Stored Cross-Site Scripting (XSS) vulnerability via the /book/addCommentReply endpoint.

Novel-Plus up to 5.2.4 was discovered to contain a Stored Cross-Site Scripting (XSS) vulnerability via the /author/updateIndexName endpoint.

A vulnerability has been found in xxyopen/201206030 novel-plus up to 5.1.3 and classified as critical.

A vulnerability, which was classified as problematic, was found in xxyopen/201206030 novel-plus up to 5.1.3.

A vulnerability, which was classified as critical, has been found in xxyopen/201206030 novel-plus up to 5.1.3.

Directory Traversal vulnerability in novel plus before v.5.1.0 allows a remote attacker to execute arbitrary code via the filePath parameter

A vulnerability was found in 201206030 Novel 3.5.0 and classified as critical.

A vulnerability, which was classified as critical, was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160.

A vulnerability, which was classified as critical, has been found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160.

A vulnerability classified as problematic was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160.

A vulnerability classified as critical has been found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160.

A vulnerability was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160.

A vulnerability has been found in 201206030 novel-cloud 1.4.0 and classified as critical.

A vulnerability was found in xxyopen Novel-Plus 5.1.0.

A vulnerability classified as critical has been found in xxyopen Novel-Plus 3.5.0.

A vulnerability was found in xxyopen Novel-Plus 5.1.0.

An issue in xxyopen novel plus v.4.4.0 and before allows a remote attacker to execute arbitrary code via the PageController.java file

A vulnerability, which was classified as critical, has been found in xxyopen Novel up to 3.4.1.