BA
Vendor
banq
13
CVEs
0
On KEV
13
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-107831 | JI jivejdon banq | 4.3 | Oct 8 | Jivejdon through 5.0 CSRF via GET-based Account and Thread Actions |
| CVE-2026-107830 | JI jivejdon banq | 5.3 | Oct 8 | Jivejdon through commit ee67a65e Missing Rate Limiting via /account/smsVRAction SMS Endpoint |
| CVE-2026-107829 | JI jivejdon banq | 5.9 | Oct 8 | Jivejdon through 5.0 Unsalted MD5 Password Storage via AccountDaoSql |
| CVE-2026-107828 | JI jivejdon banq | 6.5 | Oct 8 | Jivejdon through 5.0 Predictable Passwords via Sina Weibo OAuth Login |
| CVE-2026-107801 | JI jivejdon banq | 5.4 | Oct 8 | Jivejdon through 5.0 Stored XSS via Attachment Upload Content-Type |
| CVE-2026-107800 | JI jivejdon banq | 5.4 | Oct 8 | Jivejdon through 5.0 Stored XSS via Private Short Messages |
| CVE-2026-107799 | JI jivejdon banq | 5.4 | Oct 8 | Jivejdon through 5.0 Stored XSS via messageListBody.jsp Forum Message Rendering |
| CVE-2026-107798 | JI jivejdon banq | 5.4 | Oct 8 | Jivejdon through commit ee67a65e Stored XSS via Markdown Links in TextStyle Rendering Filter |
| CVE-2026-107797 | JI jivejdon banq | 6.1 | Oct 8 | Jivejdon through 5.0 Reflected XSS via postThread.jsp to and tag Parameters |
| CVE-2026-107796 | JI jivejdon banq | 6.1 | Oct 8 | Jivejdon through commit ee67a65e Reflected XSS via taggedThreadList.jsp tagID and count Parameters |
| CVE-2026-107793 | JI jivejdon banq | 4.3 | Oct 8 | Jivejdon through 5.0 IDOR via subSaveAction Subscription Delete |
| CVE-2026-107792 | JI jivejdon banq | 4.3 | Oct 8 | Jivejdon through commit ee67a65e Missing Authorization via /message/threadToForum/save Thread Move |
| CVE-2025-71428 | JI jivejdon banq | 4.9 | Oct 8 | Jivejdon through 5.0 SQL Injection via username in userListAction |