Vulnerabilities > Xxyopen

DATE CVE VULNERABILITY TITLE RISK
2023-09-11 CVE-2023-30058 SQL Injection vulnerability in Xxyopen Novel-Plus 3.6.2
novel-plus 3.6.2 is vulnerable to SQL Injection.
network
low complexity
xxyopen CWE-89
critical
9.8
2023-04-14 CVE-2023-2040 Unspecified vulnerability in Xxyopen Novel-Plus 3.6.2
A vulnerability classified as critical has been found in novel-plus 3.6.2.
network
low complexity
xxyopen
8.8
2023-04-14 CVE-2023-2041 Unspecified vulnerability in Xxyopen Novel-Plus 3.6.2
A vulnerability classified as critical was found in novel-plus 3.6.2.
network
low complexity
xxyopen
8.8
2023-04-14 CVE-2023-2039 Unspecified vulnerability in Xxyopen Novel-Plus 3.6.2
A vulnerability was found in novel-plus 3.6.2.
network
low complexity
xxyopen
8.8
2023-03-23 CVE-2023-1607 SQL Injection vulnerability in Xxyopen Novel-Plus 3.6.2
A vulnerability was found in novel-plus 3.6.2.
network
low complexity
xxyopen CWE-89
8.8
2023-03-23 CVE-2023-1606 SQL Injection vulnerability in Xxyopen Novel-Plus 3.6.2
A vulnerability was found in novel-plus 3.6.2 and classified as critical.
network
low complexity
xxyopen CWE-89
critical
9.8
2023-03-23 CVE-2023-1595 Unspecified vulnerability in Xxyopen Novel-Plus 3.6.2
A vulnerability has been found in novel-plus 3.6.2 and classified as critical.
network
low complexity
xxyopen
7.2
2023-03-23 CVE-2023-1594 Unspecified vulnerability in Xxyopen Novel-Plus 3.6.2
A vulnerability, which was classified as critical, was found in novel-plus 3.6.2.
network
low complexity
xxyopen
critical
9.8
2022-09-01 CVE-2022-36671 Download of Code Without Integrity Check vulnerability in Xxyopen Novel-Plus 3.6.2
Novel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the background file download API.
network
low complexity
xxyopen CWE-494
7.5
2022-09-01 CVE-2022-36672 Use of Hard-coded Credentials vulnerability in Xxyopen Novel-Plus 3.6.2
Novel-Plus v3.6.2 was discovered to contain a hard-coded JWT key located in the project config file.
network
low complexity
xxyopen CWE-798
critical
9.8