Light

shuaijunlan / autumn Goto Github PK

98.0 14.0 79.0 44.26 MB

Autumn-Blog and Autumn-CMS

License: GNU General Public License v2.0

Java 59.45% CSS 30.14% PHP 3.50% Dockerfile 0.08% Shell 0.03% TSQL 6.79%

spring spring-mvc mybatis shiro druid ehcache thymeleaf

autumn's Introduction

ludainfo tim-zyt styz1 fengxiang1990 jjcong wuchangqian richard9838 leorian zhaoliugit afanti558 caize hunshikan singelone yunspringwang becauseunderstanding lastallin ivu4e lyl1988124 gsongung xinglu sg6303 hepingkeji mayude diyagea developerhuang custyeso freeskyala roskin yangbo524 simonxyzjz jianfang-kso xia5523 minghaozhi lou296147771 yunboy songtianh lixiao1989224 mriacle tenglongwentian programmersinaction zhongzhaolin tomarots chennan1314 xiaocp2009 liangks doslin woshiwuxiaofei huangsinmen yjh99017 bobo41 doanhoa93 thinkerq appears deewooo isqiusheng gerrygithub1 u11 kflyddn wangcunjiang jacols cold11 weisg junyi5257 wenbinnie r4jay frankiegu jcohy-fork wlr96 shisanchanggong hxsam hoaronal-project cgb-cms cgb-blog-doc meitanzai

为什么我想自己写一个页面,我引用了我自己去下载的css和js文件,但是没有layui的效果

我想了解增删改查

Unauthorized status, you can get account password directly

Location：cms后台登陆，系统设置->用户管理->添加用户->登录名

POC:登录名:<script>alert("hack123")</script>

后台代码未进行输入过滤：
@RequestMapping(value = "insert/")
@responsebody
public ResponseMsg insertUser(User user){

    user.setPassword(MD5Util.getMD5(user.getPassword()));
    return userService.insertUser(user);
}

CMS log leak Current login user name and User permission information。

我添加了一个左侧菜单, 加载了一个loadJS, 然后数据库里填写了跳转的地址, html页面和.js也写好了,为什么点击不会跳转啊

就是日志添加功能里的那个文本域, 后台接收不到值, 我看了他的api文档和你写的不一样啊,

React

A declarative, efficient, and flexible JavaScript library for building user interfaces.
Vue.js

🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
TensorFlow

An Open Source Machine Learning Framework for Everyone
Django

The Web framework for perfectionists with deadlines.
Laravel

A PHP framework for web artisans
D3

Bring data to life with SVG, Canvas and HTML. 📊📈🎉

javascript

JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
web

Some thing interesting about web. New door for the world.
server

A server is a program made to process requests and deliver data to clients.
Machine learning

Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Visualization

Some thing interesting about visualization, use data art
Game

Some thing interesting about game, make everyone happy.

Facebook

We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft

Open source projects and samples from Microsoft.
Google

Google ❤️ Open Source for everyone.
Alibaba

Alibaba Open Source for everyone
D3

Data-Driven Documents codes.
Tencent

China tencent open source team.