Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2021-45227

EPSS 0.21% · P43
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2021-45227

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An issue was discovered in COINS Construction Cloud 11.12. Due to an inappropriate use of HTML IFRAME elements, the file upload functionality is vulnerable to a persistent Cross-Site Scripting (XSS) attack.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
COINS Construction Cloud 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
COINS Construction Cloud是COINS公司的一套端到端的云和移动软件解决方案。旨在帮助建筑主管推动整个业务的利润率提高。 COINS Construction Cloud 11.12存在跨站脚本漏洞，该漏洞源于HTML IFRAME元素的不当使用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2021-45227

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2021-45227

请登录查看更多情报信息。

Same Patch Batch · n/a · 2022-04-14 · 30 CVEs total

CVE-2022-27451MariaDB 安全漏洞
CVE-2021-43287ThoughtWorks GoCD 信息泄露漏洞
CVE-2022-26507AT&T Labs Xmill 缓冲区错误漏洞
CVE-2021-43633Messaging Web Application 跨站脚本漏洞
CVE-2021-43290ThoughtWorks GoCD 路径遍历漏洞
CVE-2021-43289ThoughtWorks GoCD 路径遍历漏洞
CVE-2021-43288ThoughtWorks GoCD 跨站脚本漏洞
CVE-2021-43286ThoughtWorks GoCD 命令注入漏洞
CVE-2022-27444MariaDB 安全漏洞
CVE-2022-27445MariaDB 安全漏洞
CVE-2022-27447MariaDB 资源管理错误漏洞
CVE-2022-27446MariaDB 安全漏洞
CVE-2022-27449MariaDB 安全漏洞
CVE-2022-27448MariaDB 安全漏洞
CVE-2022-27452MariaDB 安全漏洞
CVE-2022-22968Vmware Spring Framework 安全特征问题漏洞
CVE-2022-27455MariaDB 资源管理错误漏洞
CVE-2022-27457MariaDB 资源管理错误漏洞
CVE-2022-27456MariaDB 资源管理错误漏洞
CVE-2021-45228COINS Construction Cloud 跨站脚本漏洞

Showing top 20 of 30 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2021-45227

No comments yet

Leave a comment