Advisories · Technology
banq jivejdon.
Every CVE that names banq jivejdon among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Jivejdon through 5.0 CSRF via GET-based Account and Thread Actions
- banq jivejdon
- Cross-site request forgery (CSRF)
- CVSS 6.9 Medium
Jivejdon through commit ee67a65e Missing Rate Limiting via /account/smsVRAction SMS Endpoint
- banq jivejdon
- CWE-799
- CVSS 8.2 High
Jivejdon through 5.0 Unsalted MD5 Password Storage via AccountDaoSql
- banq jivejdon
- Weak cryptography or TLS
- CVSS 6.9 Medium
Jivejdon through 5.0 Predictable Passwords via Sina Weibo OAuth Login
- banq jivejdon
- Hard-coded credentials
- CVSS 5.1 Medium
Jivejdon through 5.0 Stored XSS via Attachment Upload Content-Type
- banq jivejdon
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Jivejdon through 5.0 Stored XSS via Private Short Messages
- banq jivejdon
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Jivejdon through 5.0 Stored XSS via messageListBody.jsp Forum Message Rendering
- banq jivejdon
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Jivejdon through commit ee67a65e Stored XSS via Markdown Links in TextStyle Rendering Filter
- banq jivejdon
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Jivejdon through 5.0 Reflected XSS via postThread.jsp to and tag Parameters
- banq jivejdon
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Jivejdon through commit ee67a65e Reflected XSS via taggedThreadList.jsp tagID and count Parameters
- banq jivejdon
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Jivejdon through 5.0 IDOR via subSaveAction Subscription Delete
- banq jivejdon
- Broken access control
- CVSS 5.3 Medium
Jivejdon through commit ee67a65e Missing Authorization via /message/threadToForum/save Thread Move
- banq jivejdon
- Broken access control
- CVSS 6.9 Medium
Jivejdon through 5.0 SQL Injection via username in userListAction
- banq jivejdon
- SQL injection