CVE-2020-22198

SQL Injection vulnerability in DedeCMS 5.7 via mdescription parameter to member/ajaxmembergroup.php...

CVE-2020-22198

SQL Injection vulnerability in DedeCMS 5.7 via mdescription parameter to member/ajaxmembergroup.php...

Sql injection

SQL Injection vulnerability in DedeCMS 5.7 via mdescription parameter to member/ajaxmembergroup.php...

CVE-2020-22198

SQL Injection vulnerability in DedeCMS 5.7 via mdescription parameter to member/ajaxmembergroup.php...

PT-2021-10742

Name of the Vulnerable Software and Affected Versions DedeCMS version 5.7 Description The issue is related to a SQL Injection vulnerability. It can be exploited via the mdescription parameter to the "member/ajax membergroup.php" API endpoint. Recommendations For DedeCMS version 5.7, avoid using t...

CVE-2020-22198: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in DedeCMS 5.7 via mdescription parameter to member/ajaxmembergroup.php...

Desdev DedeCMS SQL Injection Vulnerability

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. DedeCMS version 5.7 SQL injection...

CVE-2020-18265

Cross Site Request Forgery CSRF in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=actaddmember"...

CVE-2020-18264

Cross Site Request Forgery CSRF in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=acteditmember"...

PT-2021-10166

Name of the Vulnerable Software and Affected Versions: Simple-Log version 1.6 Description: The issue allows remote attackers to gain privilege and execute arbitrary code. This is achieved through a Cross Site Request Forgery CSRF in the "Simple-Log/admin/admin.php?act=act add member" component...

PT-2021-10165

Name of the Vulnerable Software and Affected Versions: Simple-Log version 1.6 Description: The issue allows remote attackers to gain privilege and execute arbitrary code. This is achieved via the "Simple-Log/admin/admin.php?act=act edit member" API endpoint. Recommendations: For Simple-Log versio...

CVE-2020-35972

An issue was discovered in YzmCMS V5.8. There is a CSRF vulnerability that can add member user accounts via member/member/add.html...

Cross site request forgery (csrf)

An issue was discovered in YzmCMS V5.8. There is a CSRF vulnerability that can add member user accounts via member/member/add.html...

CVE-2020-35972

An issue was discovered in YzmCMS V5.8. There is a CSRF vulnerability that can add member user accounts via member/member/add.html...

CVE-2020-35972

The CVE-2020-35972 entry relates to YzmCMS V5.8 and describes a Cross-Site Request Forgery (CSRF) vulnerability in the endpoint member/member/add.html. The weakness allows an attacker to cause the creation of new member user accounts via CSRF requests, as reported across multiple sources (CNVD/CN...

CVE-2020-35972

An issue was discovered in YzmCMS V5.8. There is a CSRF vulnerability that can add member user accounts via member/member/add.html...

CVE-2020-35972: Cross-Site Request Forgery (CSRF)

An issue was discovered in YzmCMS V5.8. There is a CSRF vulnerability that can add member user accounts via member/member/add.html...

PT-2021-11888

Name of the Vulnerable Software and Affected Versions: YzmCMS version 5.8 Description: An issue was discovered that allows for a CSRF vulnerability, enabling the addition of member user accounts via the "member/member/add.html" API endpoint. The estimated number of potentially affected devices...

YzmCMS YzmCMS Cross-Site Request Forgery Vulnerability

YzmCMS is a lightweight open source content management system based on PHP+Mysql architecture developed by Yuan Zhimeng alone. YzmCMS 5.8 version of the existence of cross-site request forgery vulnerability, the attacker can be member/member/add.html through the use of this vulnerability to add...

CVE-2021-24306

The Ultimate Member – User Profile, User Registration, Login & Membership Plugin WordPress plugin before 2.1.20 did not properly sanitise, validate or encode the query string when generating a link to edit user's own profile, leading to an authenticated reflected Cross-Site Scripting issue...