bycms 跨站请求伪造漏洞

bycms is a simple, easy-to-use content management system. bycms v1.3.0 has a cross-site request forgery vulnerability, an attacker can add an administrator account via admin.php/ucenter/add.html...

CVE-2020-18457: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF vulnerability exists in bycms v1.3.0 that can add an admin account via admin.php/ucenter/add.html...

CVE-2020-18454: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF vulnerability in bycms v1.3 via admin.php/systems/index/moduleid/70/groupid/1.html...

CVE-2020-18455: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability exists in bycms v3.0.4 via the title parameter in the edit function in Document.php...

bycms 跨站请求伪造漏洞

bycms is a simple, easy-to-use content management system. A cross-site request forgery vulnerability exists in bycms v1.3, which can be triggered by an attacker via admin.php/systems/index/moduleid/70/groupid/1.html...

bycms 跨站脚本漏洞

bycms is a simple, easy-to-use content management system. A cross-site scripting vulnerability exists in bycms v3.0.4, which originates from the title parameter in the edit function in Document.php...

SQL Injection Vulnerability in bycms Content Management System

Beyoncms bycms content management system is a content management system. The bycms content management system suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to gain server control privileges...

Database Password Disclosure Vulnerability in Bycms comment-add and Comment.php Methods

Bycms Beyuncms is a content management system based on thinkphp 5.0.9. A database password disclosure vulnerability exists in the Bycms comment-add and Comment.php methods. An attacker can exploit this vulnerability to obtain the database connection account and password...

SSRF vulnerability in Bycms user-post method

Bycms Beyoncms is a content management system based on thinkphp 5.0.9. An SSRF vulnerability exists in the Bycms user-post method. An attacker can exploit the vulnerability to detect the database version number and open port service information...