52 matches found
CVE-2020-20586
CVE-2020-20586 is a CSRF vulnerability in XYHCMS v3.6 that affects the endpoint /xyhai.php?s=/Auth/editUser, enabling an attacker to modify administrator data (name, email, password). The affected component is the XYHCMS CMS, specifically the editUser CSRF path. Root cause and exact code impact a...
XYHCMS 跨站请求伪造漏洞
xyhcms is a software application. A completely open source CMS content management system, simple, easy to use, secure, stable and free. xyhcmsV3.6 has a security vulnerability that can be exploited by an attacker to edit any information about an administrator, such as name, email and password...
Command Execution Vulnerability in XYHCMS
XYHCMS is a completely open source CMS content management system. XYHCMS has a command execution vulnerability that can be exploited by an attacker to gain server control privileges...
XYHCMS has a deserialization vulnerability
Xing Yunhai CMS XYHCMS is a completely open source CMS content management system. XYHCMS has a deserialization vulnerability. Attackers can use this vulnerability to obtain server privileges...
Command Execution Vulnerability in XYHCMS of Kunming Yuntao Technology Co. Ltd (CNVD-2020-62733)
XYHCMS is a completely open source CMS content management system. A command execution vulnerability exists in XYHCMS by Kunming Yuntao Technology Co. An attacker can exploit the vulnerability to gain control of the server...
Stored Cross-Site Scripting Vulnerability in XYHCMS
XYHCMS is a completely open source CMS content management system, simple, easy to use, secure, stable and free. XYHCMS has a stored cross-site scripting vulnerability. Attackers can use the vulnerability to obtain sensitive information such as user cookies...
Command Execution Vulnerability in xyhCMS of Kunming Yuntao Technology Co. Ltd (CNVD-2020-53339)
XYHCMS is a completely open source CMS content management system. A command execution vulnerability exists in XYHCMS by Kunming Yuntao Technology Co. An attacker can exploit the vulnerability to gain control of the server...
Command Execution Vulnerability in XYHCMS of Kunming Yuntao Technology Co.
XYHCMS is a completely open source CMS content management system. A command execution vulnerability exists in XYHCMS by Kunming Yuntao Technology Co. An attacker can exploit the vulnerability to gain control of the server...
xyhcms background exists arbitrary file download vulnerability
xyhcms is a completely open source CMS content management system, simple, easy to use, secure, stable and free. xyhcms background arbitrary file download vulnerability , attackers can exploit the vulnerability to download sensitive system files...
XSS vulnerability in XYHCMS backend
XYHCMS is an open source CMS content management system. XYHCMS XSS vulnerability exists in the background , an attacker can exploit the vulnerability to inject arbitrary Web script or HTML...
XSS Vulnerability in xyhCMS of Kunming Yuntao Technology Co.
Kunming Yuntao Technology Co. xyhCMS is a completely open source set of CMS content management system, simple, easy to use, secure, stable, free. Kunming Yuntao Technology Co. xyhCMS XSS vulnerability, attackers can use the vulnerability to obtain cookie information...
SQL Injection Vulnerability in xyhCMS of Kunming Yuntao Technology Co.
XYHCMS is a completely open source CMS content management system, simple, easy to use, secure, stable and free. Kunming Yuntao Technology Co. xyhCMS SQL injection vulnerability, attackers can exploit the vulnerability to obtain database sensitive information...
Command Execution Vulnerability in XYHCMS Backend Sy***.cl***.php File
XYHCMS Xingyunhai CMS is a completely open source CMS content management system. A command execution vulnerability exists in the XYHCMS backend Sy.cl.php file. Attackers can use the vulnerability to obtain control of the server...
SQL Injection Vulnerability in XYHCMS 3.6
Xing Yunhai CMS XYHCMS is a completely open source CMS content management system, simple and easy to use. XYHCMS 3.6 SQL injection vulnerability , an attacker can exploit the vulnerability to obtain sensitive information in the database...
XYHCMS Cross-Site Request Forgery Vulnerability (CNVD-2018-13984)
XYHCMS is an open source content management system CMS. A cross-site request forgery vulnerability exists in xyhai.php?s=/Auth/addUser URL in XYHCMS version 3.5. A remote attacker can exploit this vulnerability to add a backend administrator account...
CVE-2018-14583
xyhai.php?s=/Auth/addUser in XYHCMS 3.5 allows CSRF to add a background administrator account...
Cross site request forgery (csrf)
xyhai.php?s=/Auth/addUser in XYHCMS 3.5 allows CSRF to add a background administrator account...
CVE-2018-14583
xyhai.php?s=/Auth/addUser in XYHCMS 3.5 allows CSRF to add a background administrator account...
CVE-2018-14583
XYHCMS 3.5 is affected by a Cross-Site Request Forgery (CSRF) in the URL xyhai.php?s=/Auth/addUser, which can be used to add a background administrator account. The vulnerability is described across multiple sources as CVE-2018-14583. The provided connected documents confirm the affected componen...
