Skip to content
Noroxi

jnoj records

6 published records for vendor jnoj.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2019-17490
    35Monitor

    app\modules\polygon\controllers\ProblemController in Jiangnan Online Judge (aka jnoj) 0.8.0 allows arbitrary file upload, as demonstrated by

    HighCVSS 8.8No exploitEPSS 1%

    jnoj · jiangnan online judgeOct 10, 2019

  • CVE-2019-17538
    33Monitor

    Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file reading via the web/polygon/problem/viewfile?id=1&name=../ substring

    HighCVSS 7.5Proof of conceptEPSS 11%

    jnoj · jiangnan online judgeOct 13, 2019

  • CVE-2019-17537
    30Monitor

    Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file deletion via the web/polygon/problem/deletefile?id=1&name=../ substr

    HighCVSS 7.5No exploitEPSS 1%

    jnoj · jiangnan online judgeOct 13, 2019

  • CVE-2019-17493
    24Monitor

    Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[sample_input] parameter to web/admin/problem/create or web/polygon/problem/up

    MediumCVSS 6.1No exploitEPSS 1%

    jnoj · jiangnan online judgeOct 10, 2019

  • CVE-2019-17489
    24Monitor

    Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[title] parameter to web/polygon/problem/create or web/polygon/problem/update

    MediumCVSS 6.1No exploitEPSS 1%

    jnoj · jiangnan online judgeOct 10, 2019

  • CVE-2019-17491
    24Monitor

    Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[description] parameter to web/admin/problem/create or web/polygon/problem/upd

    MediumCVSS 6.1No exploitEPSS 1%

    jnoj · jiangnan online judgeOct 10, 2019