Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Jiangnan Online Judge
HIGH 7.5
CVE-2019-17537
Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file deletion via the web/polygon/problem/deletefile?id=1&name=../ substring.
No fix yet
Fix from $1,950
2019-10-13
Jiangnan Online Judge
HIGH 8.8
CVE-2019-17490
app\modules\polygon\controllers\ProblemController in Jiangnan Online Judge (aka jnoj) 0.8.0 allows arbitrary file upload, as demonstrated by PHP code…
No fix yet
Fix from $1,950
2019-10-10
Jiangnan Online Judge
MEDIUM 6.1
CVE-2019-17489
Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[title] parameter to web/polygon/problem/create or web/polygon/problem/update or web/ad…
No fix yet
Fix from $1,600
2019-10-10
Jiangnan Online Judge
MEDIUM 6.1
CVE-2019-17491
Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[description] parameter to web/admin/problem/create or web/polygon/problem/update.
No fix yet
Fix from $1,600
2019-10-10
Jiangnan Online Judge
MEDIUM 6.1
CVE-2019-17493
Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[sample_input] parameter to web/admin/problem/create or web/polygon/problem/update.
No fix yet
Fix from $1,600
2019-10-10