CVE-2018-18723

An XSS issue was discovered in index.php/admin/area/editarea/id/110000 in YUNUCMS 1.1.5...

CVE-2018-18723

CVE-2018-18723 is an XSS vulnerability in YUNUCMS 1.1.5, located at index.php/admin/area/editarea/id/110000. The connected documents confirm the affected product/version and the specific vulnerable parameter/path, but do not provide details on the underlying root cause, exploit techniques, or ava...

CVE-2018-18724

An XSS issue was discovered in index.php/admin/category/editcategory?id=73 in YUNUCMS 1.1.5...

CVE-2018-18724

CVE-2018-18724 affects YUNUCMS 1.1.5, with a cross-site scripting (XSS) flaw in index.php/admin/category/editcategory?id=73. Root cause and detailed impact are described as XSS; exploitation details are not provided in the documents. No remediation or patch information is included in the provided...

CVE-2018-18726

CVE-2018-18726 concerns a cross-site scripting vulnerability in YUNUCMS 1.1.5, specifically in admin/sitelink/editsitelink?id=16. The connected documents confirm the flaw and the affected component but do not provide details on the exact payload, underlying root cause, affected versions beyond 1....

CVE-2018-18725

Summary: CVE-2018-18725 is a cross-site scripting vulnerability affecting YUNUCMS 1.1.5, specifically in the path admin/banner/editbanner?id=20. The connected documents confirm an XSS issue in that component. NVD references assign CVSS scores: CVSS v2 base 3.5 (LOW) and CVSS v3 base 4.8 (MEDIUM),...

CVE-2018-18720

An XSS issue was discovered in index.php/admin/system/basic in YUNUCMS 1.1.5...

CVE-2018-18722

An XSS issue was discovered in admin/content/editcontent?id=29&gopage=1 in YUNUCMS 1.1.5...

CVE-2018-18726

An XSS issue was discovered in admin/sitelink/editsitelink?id=16 in YUNUCMS 1.1.5...

SQL injection vulnerability in YUNUCMS Ma***.php file (CNVD-2018-21953)

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. A SQL injection vulnerability exists in the YUNUCMS Ma.php file. An attacker can exploit this vulnerability to obtain sensitive database...

SQL injection vulnerability in YUNUCMS Ma***.php file (CNVD-2018-21954)

YUNUCMS Enterprise Website Management System YUNUCMS is a professional marketing enterprise building system based on PHP + MYSQL as the core development. A SQL injection vulnerability exists in the YUNUCMS Ma.php file. An attacker can exploit this vulnerability to obtain sensitive database...

SQL Injection Vulnerability in YUNUCMS Ma***.php File

YUNUCMS Enterprise Website Management System YUNUCMS is a professional marketing enterprise building system based on PHP + MYSQL as the core development. A SQL injection vulnerability exists in the YUNUCMS Ma.php file. An attacker can exploit this vulnerability to obtain sensitive database...

YUNUCMS cross-site scripting vulnerability (CNVD-2018-20067)

YUNUCMS is China Yunyou YUNU network technology company of a set of open source enterprise station building content management system CMS. YUNUCMS 1.1.4 version of the index.php/index/category/index page there is a cross-site scripting vulnerability, a remote attacker can take advantage of the...

CVE-2018-17322

Cross-site scripting XSS vulnerability in index.php/index/category/index in YUNUCMS 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the area parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php/index/category/index in YUNUCMS 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the area parameter...

CVE-2018-17322

Cross-site scripting XSS vulnerability in index.php/index/category/index in YUNUCMS 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the area parameter...

CVE-2018-17322

Cross-site scripting XSS vulnerability in index.php/index/category/index in YUNUCMS 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the area parameter...

CVE-2018-17322

The CVE-2018-17322 entry affects YUNUCMS 1.1.4, specifically the index.php/index/category/index page. The vulnerability is a Cross-site Scripting (XSS) flaw that can be triggered via the area parameter, allowing remote attackers to inject arbitrary web script or HTML. The root cause is improper h...

Code Execution Vulnerability in YUNUCMS v1.1.1 S***.php Page

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. A code execution vulnerability exists in the S.php page of YUNUCMS v1.1.1. An attacker can exploit the vulnerability to execute arbitrar...

YUNUCMS v1.1.1 D***.php page has SQL injection vulnerability

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. YUNUCMS v1.1.1 version of the D.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive...