Jadmin-Java Jadmin vulnerabilities

CVE-2025-4494 [CRITICAL] CWE-287 CVE-2025-4494: A vulnerability, which was classified as critical, was found in JAdmin-JAVA JAdmin 1.0. Affected is A vulnerability, which was classified as critical, was found in JAdmin-JAVA JAdmin 1.0. Affected is the function toLogin of the file NoNeedLoginController.java of the component Admin Backend. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-4495 [MEDIUM] CWE-79 CVE-2025-4495: A vulnerability has been found in JAdmin-JAVA JAdmin 1.0 and classified as problematic. Affected by A vulnerability has been found in JAdmin-JAVA JAdmin 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /memoAjax/save. The manipulation of the argument ID leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.