9 matches found
EUVD-2022-53493
Malicious code in bioql PyPI...
CVE-2022-32300
YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the MailSendID parameter at /App/Lib/Action/Admin/MailAction.class.php...
YoudianCMS SQL Injection Vulnerability (CNVD-2022-59020)
YouDianCMS is a website CMS. A SQL injection vulnerability exists in YoudianCMS v9.5.0, which originates from the lack of validation of the MailSendID parameter at /App/Lib/Action/Admin/MailAction.class.php against external SQL input. This vulnerability can be exploited by attackers to execute...
CVE-2022-32300
YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the MailSendID parameter at /App/Lib/Action/Admin/MailAction.class.php...
CVE-2022-32300
YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the MailSendID parameter at /App/Lib/Action/Admin/MailAction.class.php...
Sql injection
YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the MailSendID parameter at /App/Lib/Action/Admin/MailAction.class.php...
CVE-2022-32300
CVE-2022-32300 affects YoudianCMS v9.5.0, with a SQL injection vulnerability exploitable via the MailSendID parameter in /App/Lib/Action/Admin/MailAction.class.php. Root cause: lack of input validation on MailSendID. Public descriptions (CNVD/CNNVD/NVD) indicate attackers could execute arbitrary ...
CVE-2022-32300
YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the MailSendID parameter at /App/Lib/Action/Admin/MailAction.class.php...
PT-2022-21217 · Unknown · Youdiancms
Name of the Vulnerable Software and Affected Versions: YoudianCMS version 9.5.0 Description: The issue is a SQL injection vulnerability. It occurs via the MailSendID parameter at the "/App/Lib/Action/Admin/MailAction.class.php" endpoint. Recommendations: For YoudianCMS version 9.5.0, consider...