CVE-2019-5310

YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php because crafted data can be written to the sys.php file, as demonstrated by sitetitle in an admin/system/basic POST request...

CVE-2018-17322

Cross-site scripting XSS vulnerability in index.php/index/category/index in YUNUCMS 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the area parameter...

YUNUCMS Code Issues Vulnerabilities

YUNUCMS is a website CMS. YUNUCMS 2.2.6 and earlier versions have a code issue vulnerability, the vulnerability stems from the parameter templateFile in file /app/index/controller/Common.php has an arbitrary file upload vulnerability...

CVE-2020-18445

Cross Site Scripting XSS vulnerability exists in YUNUCMS 1.1.9 via the upurl function in Page.php...

CVE-2020-18446

Cross Site Scripting XSS vulnerability exists in YUNUCMS 1.1.9 via the param parameter in the insertContent function in ContentModel.php...

CVE-2020-18445

Cross Site Scripting XSS vulnerability exists in YUNUCMS 1.1.9 via the upurl function in Page.php...

CVE-2020-18446

Cross Site Scripting XSS vulnerability exists in YUNUCMS 1.1.9 via the param parameter in the insertContent function in ContentModel.php...

Cross site scripting

Cross Site Scripting XSS vulnerability exists in YUNUCMS 1.1.9 via the param parameter in the insertContent function in ContentModel.php...

Cross site scripting

Cross Site Scripting XSS vulnerability exists in YUNUCMS 1.1.9 via the upurl function in Page.php...

CVE-2020-18446

Cross Site Scripting XSS vulnerability exists in YUNUCMS 1.1.9 via the param parameter in the insertContent function in ContentModel.php...

CVE-2020-18446

CVE-2020-18446 affects YUNUCMS 1.1.9; a Cross Site Scripting (XSS) flaw exists in the ContentModel.php insertContent function via the param parameter. Documented in multiple sources (NVD/RH/CVE lists/CNNVD). CVSS scores: v2 base 3.5 (LOW) and v3.1 base 4.8 (MEDIUM). No remediation or patch detail...

CVE-2020-18445

CVE-2020-18445 is an XSS vulnerability in YUNUCMS 1.1.9 exploitable via the upurl function in Page.php. The issue is caused by improper input handling in that function, enabling cross-site scripting. Affected component is the upurl pathway within Page.php of YUNUCMS 1.1.9. The CVSS summaries indi...

CVE-2020-18445

Cross Site Scripting XSS vulnerability exists in YUNUCMS 1.1.9 via the upurl function in Page.php...

YUNUCMS 跨站脚本漏洞

YUNUCMS is a website CMS. A cross-site scripting vulnerability exists in YUNUCMS 1.1.9, which originates from the upurl function in Page.php...

SQL injection vulnerability in YUNUCMS V2***.php file of Zhenjiang Yunyu Network Technology Co.

YUNUCMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. Zhenjiang Yunyu Network Technology Co., Ltd. YUNUCMS V2.php file SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in YUNUCMS of Zhenjiang Yunyu Network Technology Co., Ltd (CNVD-2020-41337)

CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. Zhenjiang Yunyu Network Technology Co., Ltd. YUNUCMS SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in YUNUCMS Di***.php File

YUNUCMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. YUNUCMS Di.php file SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

Zhenjiang Yunyu Network Technology Co., Ltd. YUNUCMS exists sql injection vulnerability

CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. Zhenjiang Yunyu Network Technology Co., Ltd. YUNUCMS there is a sql injection vulnerability, attackers can use the vulnerability to obtain database sensitive informati...

XSS Vulnerability at YUNUCMS Friendly Link API

CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. YUNUCMS Friendly Link API at the existence of XSS vulnerability, attackers can exploit the vulnerability to obtain the administrator's cookies...

Command Execution Vulnerability in YUNUCMS

YUNUCMS is China Yunyou YUNU network technology company of a set of open source enterprise station building content management system CMS. YUNUCMS has a command execution vulnerability that can be exploited by an attacker to gain server privileges...