sims issues

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

#### **[Suggested description]** This open source system is a student information management system. There was an insecurity vulnerability in the announcement. Attackers can use this vulnerability to implement cross-site scripting...

mbslzny

Relative Path Traversal

#### **[Suggested description]** Relative Path Traversal exists in sims. The front end of this open source system is an online examination system. This open source system is a student information...

mbslzny

Unrestricted Upload of File with Dangerous Type

#### **[Suggested description]** Unrestricted Upload of File with Dangerous Type vulnerability exists in SIMS. This open source system is a student information management system. There is an insecure vulnerability when...

mbslzny

疑问

请问项目配置完成后运行，登录时显示账号或密码错误是怎么回事，druid.properties修改好了而且名称没有问题

21JayChou

文件列表访问

3

- 1无法上传文件：http://localhost:8080/sims/uploadServlet 界面显示空白 - 2.导致文件列表访问报错严重 [http-nio-8080-exec-2] org.apache.catalina.core.StandardWrapperValve.invoke 在路径为[/sims]的上下文中，servlet[web.servlet.file.FileListServlet]的Servlet.service()引发异常 java.lang.NullPointerException HTTP状态 500 - 内部服务器错误类型异常报告描述服务器遇到一个意外的情况，阻止它完成请求。例外情况 java.lang.NullPointerException web.servlet.file.FileListServlet.doPost(FileListServlet.java:28) web.servlet.file.FileListServlet.doGet(FileListServlet.java:56) javax.servlet.http.HttpServlet.service(HttpServlet.java:626) javax.servlet.http.HttpServlet.service(HttpServlet.java:733) org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)

ayanami9911