Mingsheng Lin

admin3 through 3.0.0 Session Not Invalidated When a User Account Is Disabled

admin3 through 3.0.0 Arbitrary File Write via Path Traversal in Storage Upload Filename

admin3 through 3.0.0 Session Token Disclosure via Audit Log

novel-plus through 5.3.3 Missing Authorization on the Admin Book Download Endpoint

novel-plus through 5.3.3 Default Cache Management Password in the Front Portal

novel-plus through 5.3.3 Missing Authorization on the Admin /sys/user/list Endpoint

MoguBlog through 6.2 Missing Authorization on the Admin getPictureSortByUid Endpoint

MoguBlog through 6.2 Comment Author Spoofing via Request-Body Identity

MoguBlog through 6.2 Missing Authentication on the Comment Email-Notification Endpoint

MoguBlog through 6.2 Arbitrary Comment Deletion via Request-Body Ownership Check