Skip to content
Noroxi

keking records

12 published records for vendor keking.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23
  3. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

12 records
  • CVE-2022-42149
    40Plan

    kkFileView 4.0 is vulnerable to Server-side request forgery (SSRF) via controller\OnlinePreviewController.java.

    CriticalCVSS 9.8Proof of conceptEPSS 2%

    keking · kkfileviewOct 17, 2022

  • CVE-2021-43734
    33Monitor

    kkFileview v4.0.0 has arbitrary file read through a directory traversal vulnerability which may lead to sensitive file leak on related host.

    HighCVSS 7.5Proof of conceptEPSS 10%

    keking · kkfileviewFeb 15, 2022

  • CVE-2022-43140
    31Monitor

    kkFileView v4.1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component cn.keking.web.controller.OnlinePreviewCon

    HighCVSS 7.5Proof of conceptEPSS 2%

    keking · kkfileviewNov 17, 2022

  • CVE-2022-36593
    26Monitor

    kkFileView v4.0.0 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter at /controller/FileControlle

    MediumCVSS 6.5No exploitEPSS 0%

    keking · kkfileviewSep 2, 2022

  • CVE-2022-29349
    25Monitor

    kkFileView v4.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /controller/OnlinePreviewCon

    MediumCVSS 6.1Proof of conceptEPSS 1%

    keking · kkfileviewMay 24, 2022

  • CVE-2022-35151
    24Monitor

    kkFileView v4.1.0 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the urls and currentUrl parameters at /c

    MediumCVSS 6.1Proof of conceptEPSS 1%

    keking · kkfileviewAug 17, 2022

  • CVE-2022-40879
    24Monitor

    kkFileView v4.1.0 is vulnerable to Cross Site Scripting (XSS) via the parameter 'errorMsg.'

    MediumCVSS 6.1Proof of conceptEPSS 1%

    keking · kkfileviewSep 29, 2022

  • CVE-2022-46934
    24Monitor

    kkFileView v4.1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /controller/OnlinePreviewCon

    MediumCVSS 6.1Proof of conceptEPSS 1%

    keking · kkfileviewFeb 1, 2023

  • CVE-2022-4740
    24Monitor

    kkFileView picturesPreview setWatermarkAttribute cross site scripting

    MediumCVSS 6.1No exploitEPSS 0%

    keking · kkfileviewDec 25, 2022

  • CVE-2022-42147
    24Monitor

    kkFileView 4.0 is vulnerable to Cross Site Scripting (XSS) via controller\ Filecontroller.java.

    MediumCVSS 6.1No exploitEPSS 0%

    keking · kkfileviewOct 17, 2022

  • CVE-2023-48815
    24Monitor

    kkFileView v4.3.0 is vulnerable to Incorrect Access Control.

    MediumCVSS 6.1No exploitEPSS 0%

    keking · kkfileviewDec 4, 2023

  • CVE-2025-4538
    21Monitor

    kkFileView fileUpload unrestricted upload

    MediumCVSS 5.3No exploitEPSS 0%

    keking · kkfileviewMay 11, 2025