sanluan/PublicCMS issues and pull requests

#80 - Bump org.springframework:spring-webmvc from 5.3.39 to 6.1.13 in /publiccms-parent

Pull Request - State: open - Opened by dependabot[bot] 15 days ago - 1 comment
Labels: dependencies

#79 - There is an xss vulnerability caused by file uploads in PublicCMS V4.0

Issue - State: closed - Opened by RexHarrr 10 months ago - 2 comments

#78 - There is a SSRF vulnerability in the lastest version of PublicCMS- V4.0.202302.e

Issue - State: closed - Opened by haoami 11 months ago - 3 comments

#77 - There is an SSRF vulnerability in publiccms V4.0.202302.e, whice allow attackers to access the website of intranet or detect whether the port is open

Issue - State: closed - Opened by aoaoaoe 11 months ago - 1 comment

#76 - Trigger deserialization rce through redis cache

Issue - State: closed - Opened by haoami 11 months ago

#75 - 初始化只能通过localhost访问吗

Issue - State: closed - Opened by yanyi5496 11 months ago - 2 comments

#74 - Admin backend RCE

Issue - State: closed - Opened by mntn0x about 1 year ago - 1 comment

#73 - Unable to load static files

Issue - State: closed - Opened by SnowyThinker over 1 year ago - 3 comments

#72 - A vulnerability exists in PublicCMS V4.0.202302.c and below, Arbitrary file write

Issue - State: closed - Opened by LiangChen-Ye over 1 year ago - 2 comments

#71 - Bump commons-fileupload from 1.4 to 1.5 in /publiccms-parent

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies

#70 - Bump spring-web from 5.3.25 to 6.0.0 in /publiccms-parent

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 2 comments
Labels: dependencies

#69 - Bump metadata-extractor from 2.17.0 to 2.18.0 in /publiccms-parent

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 2 comments
Labels: dependencies

#68 - A vulnerability exists in PublicCMS V4.0.202204.d and below, Cross-site request forgery(CSRF)

Issue - State: closed - Opened by h18192h almost 2 years ago - 1 comment

#67 - /SysDatasourceAdminController.java/save 受mysql恶意服务器影响

Issue - State: closed - Opened by azraelxuemo almost 2 years ago - 2 comments

#66 - 后台存储型xss

Issue - State: closed - Opened by kevinoclam about 2 years ago - 2 comments

#65 - Bump poi-scratchpad from 4.1.2 to 5.2.1 in /publiccms-parent

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago - 1 comment
Labels: dependencies

#64 - There is an XSS vulnerability in managing background file management

Issue - State: closed - Opened by CyberIKUN over 2 years ago - 1 comment

#63 - Bump jackson-databind from 2.12.4 to 2.12.6.1 in /publiccms-parent

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago
Labels: dependencies

#62 - Bump spring-boot-starter-web from 2.5.2 to 2.5.12 in /publiccms-parent

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago
Labels: dependencies

#61 - Bump spring-webmvc from 5.3.8 to 5.3.18 in /publiccms-parent

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago
Labels: dependencies

#60 - 管理后台的文件管理存在xss漏洞

Issue - State: closed - Opened by CyberIKUN over 2 years ago - 7 comments

#59 - #

Issue - State: closed - Opened by chauncyman almost 3 years ago - 8 comments

#58 - Who to contact for security issues

Issue - State: closed - Opened by zidingz almost 3 years ago

#57 - The default bat file parameters are controllable, resulting in rce

Issue - State: closed - Opened by e0mlja about 3 years ago - 1 comment

#56 - Bump ant from 1.10.9 to 1.10.11 in /publiccms-parent

Pull Request - State: closed - Opened by dependabot[bot] about 3 years ago
Labels: dependencies

#55 - Fix typo

Pull Request - State: closed - Opened by dengliming about 3 years ago

#54 - 优化同步逻辑及修复数据库脚本错误

Pull Request - State: closed - Opened by qicz over 3 years ago - 9 comments

#53 - 一键同步template，pages，task

Pull Request - State: closed - Opened by qicz over 3 years ago

#52 - Bump mybatis from 3.5.5 to 3.5.6 in /publiccms-parent

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago
Labels: dependencies

#51 - There is a SSRF vulnerability via /publiccms/admin/ueditor

Issue - State: closed - Opened by seedis over 3 years ago - 1 comment

#50 - Bump ant from 1.10.8 to 1.10.9 in /publiccms-parent

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago
Labels: dependencies

#48 - Bump junit from 4.12 to 4.13.1 in /publiccms-parent

Pull Request - State: closed - Opened by dependabot[bot] almost 4 years ago
Labels: dependencies

#47 - Bump ant from 1.10.7 to 1.10.8 in /publiccms-parent

Pull Request - State: closed - Opened by dependabot[bot] about 4 years ago
Labels: dependencies

#46 - Remove unnecessary throw exceptions from the method signature

Pull Request - State: closed - Opened by dengliming about 4 years ago - 4 comments

#45 - Remove unnecessary 'public' in interface

Pull Request - State: closed - Opened by dengliming about 4 years ago

#44 - Should we remove unnecessary 'public' in interface?

Issue - State: closed - Opened by dengliming about 4 years ago - 2 comments

#43 - Use lambda

Pull Request - State: closed - Opened by dengliming about 4 years ago

#42 - Update gradle version

Pull Request - State: closed - Opened by dengliming about 4 years ago

#41 - Remove duplicate branches in switch

Pull Request - State: closed - Opened by dengliming about 4 years ago

#40 - Merge pull request #1 from sanluan/master

Pull Request - State: closed - Opened by mango9c about 4 years ago

#39 - 授权价格明细数据在哪可以看到？

Issue - State: closed - Opened by wangjiahao123456 over 4 years ago - 1 comment

#38 - Replace "UTF-8" with Constants.DEFAULT_CHARSET_NAME

Pull Request - State: closed - Opened by dengliming over 4 years ago - 1 comment

#37 - Found a storage type xss vulnerability In the latest version

Issue - State: closed - Opened by YagamiiLight over 4 years ago

#36 - 修改sys_domain和sys_cluster的存储引擎为MyISAM

Pull Request - State: closed - Opened by wtune over 4 years ago

#35 - 修改数据库表引擎提高分页查询中统计行数的性能

Issue - State: closed - Opened by wtune over 4 years ago - 2 comments

#34 - 优化数据库索引

Pull Request - State: closed - Opened by wtune over 4 years ago - 1 comment

#33 - 优化数据库索引加快查询速度

Issue - State: closed - Opened by wtune over 4 years ago - 1 comment

#32 - Bump jackson-databind from 2.9.10.1 to 2.9.10.3 in /publiccms-parent

Pull Request - State: closed - Opened by dependabot[bot] over 4 years ago
Labels: dependencies

#31 - Develop

Pull Request - State: closed - Opened by a469517790 over 4 years ago - 2 comments

#30 - Bump version.spring from 5.0.12.RELEASE to 5.2.3.RELEASE in /publiccms-parent

Pull Request - State: closed - Opened by dependabot[bot] over 4 years ago - 1 comment
Labels: dependencies

#29 - There is a SQL Injection vulnerability that can dump the database

Issue - State: closed - Opened by x00er over 4 years ago - 3 comments

#28 - docker hub中的镜像不能用吗

Issue - State: closed - Opened by duansheli over 4 years ago - 2 comments

#27 - Background storage XSS

Issue - State: closed - Opened by wind226 almost 5 years ago - 5 comments

#26 - Forging x-forwarded-for data

Issue - State: closed - Opened by blackjliuyun almost 5 years ago - 1 comment

#25 - There is a xss via /publiccms/admin/cmsCategoryType/save.do

Issue - State: closed - Opened by Invi0sible about 5 years ago - 1 comment

#24 - 页面片段管理手动添加推荐位内容遍历不出数据

Issue - State: closed - Opened by gaoxiaobo0513 over 5 years ago - 3 comments

#23 - v4.0 新增的站点后台登陆不了

Issue - State: closed - Opened by 333zjb over 5 years ago - 2 comments

#22 - There is a stored xss via /publiccms/admin/ in logo

Issue - State: closed - Opened by tcsecchen almost 6 years ago - 1 comment

#21 - Fix publish date

Pull Request - State: closed - Opened by jyworker almost 6 years ago

#20 - 无法取到id

Issue - State: closed - Opened by ginger-k almost 6 years ago - 1 comment

#19 - 密码错误

Issue - State: closed - Opened by tain198127 almost 6 years ago - 1 comment

#18 - There is a brute force vulnerabillity via publiccms/admin/login.html

Issue - State: closed - Opened by Echox1 about 6 years ago

#17 - URL redirection 302 vulnerability

Issue - State: closed - Opened by ly55521 about 6 years ago

#16 - 初始化界面无法引用js静态资源

Issue - State: closed - Opened by fishlikewater about 6 years ago - 1 comment

#15 - 修改有序Properties LinkedProperties为线程安全的

Pull Request - State: closed - Opened by QiAnXinCodeSafe about 6 years ago - 1 comment

#14 - 使用了!=比较基本类型的包装类

Issue - State: closed - Opened by QiAnXinCodeSafe about 6 years ago - 1 comment

#13 - There is a "Unsafe Unzip" vulnerability that can get webshell

Issue - State: closed - Opened by fupinglee over 6 years ago - 3 comments

#12 - There is a "Directory Traversal" and "Arbitrary file read" vulnerability that can read system dir and file

Issue - State: closed - Opened by jearyorg over 6 years ago - 1 comment

#11 - There is a CSRF vulnerability that can add the administrator account

Issue - State: closed - Opened by jearyorg over 6 years ago - 4 comments

#10 - Merge pull request #1 from sanluan/master

Pull Request - State: closed - Opened by linuxGood about 7 years ago - 1 comment

#9 - Merge pull request #1 from sanluan/master

Pull Request - State: closed - Opened by linuxGood about 7 years ago - 1 comment

#8 - Merge pull request #1 from sanluan/master

Pull Request - State: closed - Opened by linuxGood about 7 years ago

#7 - 有站点访问统计方面的数据么

Issue - State: closed - Opened by CHparis about 7 years ago - 2 comments

#6 - test3

Pull Request - State: closed - Opened by jibare about 7 years ago

#5 - 为什么工程全是错误

Issue - State: closed - Opened by Dull24 about 7 years ago - 1 comment

#4 - Merge pull request #1 from sanluan/master

Pull Request - State: closed - Opened by jibare over 7 years ago

#3 - Merge pull request #1 from sanluan/master

Pull Request - State: closed - Opened by jibare over 7 years ago

#2 - Merge pull request #1 from sanluan/master

Pull Request - State: closed - Opened by jibare over 7 years ago

#1 - Fix broken headings in Markdown files

Pull Request - State: closed - Opened by bryant1410 over 7 years ago

GitHub / sanluan/PublicCMS issues and pull requests