6 matches found
CVE-2019-5310
YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php because crafted data can be written to the sys.php file, as demonstrated by sitetitle in an admin/system/basic POST request...
Cross site request forgery (csrf)
YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php because crafted data can be written to the sys.php file, as demonstrated by sitetitle in an admin/system/basic POST request...
CVE-2019-5310
YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php because crafted data can be written to the sys.php file, as demonstrated by sitetitle in an admin/system/basic POST request...
CVE-2018-18720
An XSS issue was discovered in index.php/admin/system/basic in YUNUCMS 1.1.5...
Cross site scripting
An XSS issue was discovered in index.php/admin/system/basic in YUNUCMS 1.1.5...
YUNUCMS cross-site scripting vulnerability (CNVD-2018-23272)
YUNUCMS is a three-network, self-substation system of open source content management system. YUNUCMS 1.1.5 in index.php/admin/system/basic cross-site scripting vulnerability, attackers can exploit the vulnerability to carry out cross-site attacks...