CVE-2018-16553

In Jspxcms 9.0.0, a vulnerable URL routing implementation allows remote code execution after logging in as web admin.

• CWE-284

• http://www.jspxcms.com/jspbb/question/770Vendor Advisory
• https://gitee.com/jspxcms/Jspxcms/releasesRelease Notes, Third Party Advisory
• http://www.jspxcms.com/jspbb/question/770Vendor Advisory
• https://gitee.com/jspxcms/Jspxcms/releasesRelease Notes, Third Party Advisory

Published

Jun 20, 2019

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-16548An issue was discovered in ZZIPlib through 0.13.69. There is…
• CVE-2018-16549HScripts PHP File Browser Script v1.0 allows Directory Trave…
• CVE-2018-1655IBM AIX 5.3, 6.1, 7.1, and 7.2 contains a vulnerability in t…4
• CVE-2018-16550TeamViewer 10.x through 13.x allows remote attackers to bypa…
• CVE-2018-16551LavaLite 5.5 has XSS via a /edit URI, as demonstrated by cli…
• CVE-2018-16552MicroPyramid Django-CRM 0.2 allows CSRF for /users/create/, …8.8
• CVE-2018-16554The ProcessGpsInfo function of the gpsinfo.c file of jhead 3…
• CVE-2018-16555A vulnerability has been identified in SCALANCE S602 (All ve…
• CVE-2018-16556A vulnerability has been identified in SIMATIC S7-400 CPU 4…7.5
• CVE-2018-16557A vulnerability has been identified in SIMATIC S7-400 CPU 4…8.2
• CVE-2018-16558A vulnerability has been identified in SIMATIC S7-1500 CPU (…
• CVE-2018-16559A vulnerability has been identified in SIMATIC S7-1500 CPU (…