OneNav 漏洞列表
共找到 4 个与 OneNav 相关的漏洞
📅 加载漏洞趋势中...
-
CVE-2024-33832: OneNav v0.9.35-20240318 - Server-Side Request Forgery (SSRF) POC
OneNav v0.9.35-20240318 is vulnerable to server-side request forgery (SSRF) via the url parameter in the get_link_info API. An attacker can force the server to make arbitrary requests, potentially accessing internal resources. -
CVE-2024-33832: OneNav v0.9.35-20240318 - Server-Side Request Forgery (SSRF) POC
OneNav v0.9.35-20240318 is vulnerable to server-side request forgery (SSRF) via the url parameter in the get_link_info API. An attacker can force the server to make arbitrary requests, potentially accessing internal resources. -
OneNav 书签管理应用 index.php 默认口令漏洞 无POC
OneNav 是一款书签管理应用。该应用存在默认口令,攻击者可通过默认口令(admin/admin)控制整个平台,使用管理员权限操作核心功能。 -
onenav信息泄露 无POC
onenav是使用PHP + SQLite 3开发的书签管理器(导航)。该系统过滤不严导致用户名泄露。