← Back

188jianzhan

Vendor: Vtimecn • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-39427
1Vtimecn
1188jianzhan
Jun 17, 2026
Dec 15, 2022
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Cross site scripting vulnerability in 188Jianzhan 2.10 allows attackers to execute arbitrary code via the username parameter to /admin/reg.php.
CVE-2020-23685
1Vtimecn
1188jianzhan
Jun 17, 2026
Nov 2, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
SQL Injection vulnerability in 188Jianzhan v2.1.0, allows attackers to execute arbitrary code and gain escalated privileges, via the username parameter to login.php.