Advisories · Technology
z-9527 admin.
Every CVE that names z-9527 admin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.1 Medium
z-9527 admin Message Create Endpoint message.js cross site scripting
- z-9527 admin
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
z-9527 admin User Update Endpoint user.js dynamically-determined object attributes
- z-9527 admin
- Broken access control
- CWE-913
- CVSS 5.3 Medium
z-9527 admin isImg Check upload.js uploadFile path traversal
- z-9527 admin
- Path traversal
- CVSS 6.9 Medium
z-9527 admin user.js getUsers sql injection
- z-9527 admin
- Other injection
- SQL injection