CVE-2025-28096

Mô tả

Tham khảo

• yuque.com/morysummer/vx41bz/oqi6pyv26gci6465 · Exploit

Lỗ hổng khác của onenav

• CVE-2025-28097TRUNG BÌNH 5.5OneNav 1.1.0 is vulnerable to Cross Site Scripting (XSS) in custom headers.
• CVE-2023-7210NGHIÊM TRỌNG 9.8A vulnerability was found in OneNav up to 0.9.33. It has been classified as critical. This affects an unknown part of the file /index.php?c=…
• CVE-2022-26276TRUNG BÌNH 5.3An issue in index.php of OneNav v0.9.14 allows attackers to perform directory traversal.
• CVE-2021-38712CAO 7.5OneNav 0.9.12 allows Information Disclosure of the onenav.db3 contents. NOTE: the vendor's recommended solution is to block the access via a…
• CVE-2021-38138TRUNG BÌNH 5.4OneNav beta 0.9.12 allows XSS via the Add Link feature. NOTE: the vendor's position is that there intentionally is not any XSS protection at…