Code Execution Vulnerability in xyhcms v3.5

Xing Yunhai CMS XYHcms is a completely open source CMS content management system. xyhcms v3.5 version of the code execution vulnerabilities , attackers can exploit the vulnerability to insert a sentence Trojan horse to obtain the website webshell...

XYHCMS_V3-20170614 CSRF and File Upload Vulnerabilities in the Backend

Xing Yunhai CMS XYHcms is a completely open source CMS content management system. XYHCMSV3-20170614 CSRF and file upload vulnerability exists in the background. Attackers can use this vulnerability to lure administrators to click on specially crafted links to further Getshell and gain control of...