EUVD-2022-48176

Malicious code in bioql PyPI...

CVE-2022-45276

An issue in the /index/user/useredit.html component of YJCMS v1.0.9 allows unauthenticated attackers to obtain the Administrator account password...

CVE-2022-45276

An issue in the /index/user/useredit.html component of YJCMS v1.0.9 allows unauthenticated attackers to obtain the Administrator account password...

Default credentials

An issue in the /index/user/useredit.html component of YJCMS v1.0.9 allows unauthenticated attackers to obtain the Administrator account password...

CVE-2022-45276

An issue in the /index/user/useredit.html component of YJCMS v1.0.9 allows unauthenticated attackers to obtain the Administrator account password...

CVE-2022-45276

CVE-2022-45276 affects YJCMS v1.0.9. The issue resides in the /index/user/user_edit.html component, enabling unauthenticated attackers to obtain the Administrator account password. Severity per CVSS v3.1 is CRITICAL (9.8/10) with network access, low attack complexity, and no privileges required, ...

CVE-2022-45276: Direct Request

An issue in the /index/user/useredit.html component of YJCMS v1.0.9 allows unauthenticated attackers to obtain the Administrator account password...

CVE-2022-45276

An issue in the /index/user/useredit.html component of YJCMS v1.0.9 allows unauthenticated attackers to obtain the Administrator account password...

PT-2022-27455 · Yjcms · Yjcms

Name of the Vulnerable Software and Affected Versions: YJCMS version 1.0.9 Description: An issue in the "/index/user/user edit.html" component allows unauthenticated attackers to obtain the Administrator account password. Recommendations: For YJCMS version 1.0.9, consider restricting access to th...