Skip to content
Noroxi

luckyframe records

5 published records for vendor luckyframe.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23
  2. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

5 records
  • CVE-2023-24219
    39Monitor

    LuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /system/UserMapper.xml.

    CriticalCVSS 9.8No exploitEPSS 0%

    luckyframe · luckyframewebFeb 17, 2023

  • CVE-2023-24220
    39Monitor

    LuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /system/RoleMapper.xml.

    CriticalCVSS 9.8No exploitEPSS 0%

    luckyframe · luckyframewebFeb 17, 2023

  • CVE-2023-24221
    39Monitor

    LuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /system/DeptMapper.xml.

    CriticalCVSS 9.8No exploitEPSS 0%

    luckyframe · luckyframewebFeb 17, 2023

  • CVE-2024-35081
    30Monitor

    LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter in the fileDownload metho

    HighCVSS 7.5No exploitEPSS 0%

    luckyframe · luckyframewebMay 23, 2024

  • CVE-2024-33118
    30Monitor

    LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary read vulnerability via the fileDownload method in class com.luckyframe.project.c

    HighCVSS 7.5No exploitEPSS 0%

    luckyframe · luckyframewebMay 6, 2024