Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown
CVE-2022-35121
Disclosure Date: August 17, 2022 (last updated February 24, 2025)
Novel-Plus v3.6.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /service/impl/BookServiceImpl.java.
0
Attacker Value
Unknown
CVE-2021-41921
Disclosure Date: April 28, 2022 (last updated February 23, 2025)
novel-plus V3.6.1 allows unrestricted file uploads. Unrestricted file suffixes and contents can lead to server attacks and arbitrary code execution.
0
