Lucene search

CVE-2018-11554

🗓️ 05 Jun 2018 11:00:29Reported by [email protected]Type

The forgotten password feature in YzmCMS v3.2-v3.7 allows remote attackers to hijack accounts via a brute-force attac

Reporter	Title	Published	Views	Family All 3
Prion	Default credentials	5 Jun 201811:29	–	prion
Cvelist	CVE-2018-11554	5 Jun 201811:00	–	cvelist
CVE	CVE-2018-11554	5 Jun 201811:29	–	cve

Nvd

Node

yzmcms yzmcmsRange3.2–3.7

Source	Link
github	www.github.com/littleheary/-YzmCMS-User-Traversal-Vulnerability/blob/master/README.md

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Jun 2018 11:29Current

9.3High risk

Vulners AI Score9.3

CVSS27.5

CVSS39.8

EPSS0.00707

CWE-200