CVE-2018-8761

protected\apps\member\controller\shopcarController.php in Yxcms building system compatible cell phone v1.4.7 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture...

CVE-2018-8761

protected\apps\member\controller\shopcarController.php in Yxcms building system compatible cell phone v1.4.7 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture...

CVE-2018-8761

protected\apps\member\controller\shopcarController.php in Yxcms building system compatible cell phone v1.4.7 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture...

Design/Logic Flaw

protected\apps\member\controller\shopcarController.php in Yxcms building system compatible cell phone v1.4.7 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture...

CVE-2018-8761

protected\apps\member\controller\shopcarController.php in Yxcms building system compatible cell phone v1.4.7 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture...

CVE-2018-8761

CVE-2018-8761 : In Yxcms building system (compatible cell phone) v1.4.7, a logic flaw in the file protected\apps\member\controller\shopcarController.php allows an attacker to modify a price before form submission by observing data in a packet capture. The vulnerability is described in multiple so...

Yxcms Arbitrary File Deletion Vulnerability

Yxcms is an enterprise building system based on PHP and mysql technology. Yxcms 1.4.6 version exists arbitrary file deletion vulnerability, attackers can use the vulnerability to delete files arbitrarily...

YXCMS backend new template with SQL execution function has arbitrary file write vulnerability

Yxcms is an enterprise building system based on PHP and mysql technology. YXCMS backend new templates and SQL execution function has arbitrary file write vulnerability, attackers can exploit the vulnerability to write webshell, get server privileges...

YxcmsAPP V1.4.3 Stored Cross-site Scripting Vulnerability at Frontend Guestbook

Yxcms is an enterprise building system based on PHP and mysql technology. YxcmsAPP V1.4.3 stored cross-site scripting vulnerability in the front-end guestbook. An attacker can insert malicious js code into the page to obtain user cookies and other information, leading to user hijacking...

Multiple vulnerabilities in YXCMS frontend

YXcms is a website management system based on PHP+MySql with a lightweight MVC design model. YXCMS front-end cross-site scripting and cross-site request forgery vulnerabilities. htmlin function is not strict on xss filtering does not take into account the pseudo-protocol , due to the failure to...

YXcms newsController.php SQL Injection Vulnerability

YXcms is a website management system based on PHP+MySql with a lightweight MVC design model. A SQL injection vulnerability exists in YXcms newsController.php. Allow attackers to exploit the vulnerability to obtain sensitive database information...

YXcms photoController.php SQL Injection Vulnerability

YXcms is a website management system based on PHP+MySql with a lightweight MVC design model. A SQL injection vulnerability exists in YXcms photoController.php. Allow attackers to exploit the vulnerability to obtain sensitive database information...

Cross-site scripting vulnerability in yxcms Referer parameter

YXcms is a website management system based on PHP+MySql with a lightweight MVC design model. A cross-site scripting vulnerability exists in the Referer parameter on the yxcms\protected\apps\member\controller\indexController.php page in yxcms V1.4. Because the program does not filter the...

Arbitrary File Read Vulnerability in yxcms Version 1.3.9

YXcms is a website management system based on PHP+MySql with a lightweight MVC design model. An arbitrary file read vulnerability exists in yxcms version 1.3.9. An attacker can exploit the vulnerability to obtain sensitive system information...

yxcms V1.3.9 Arbitrary File Deletion Vulnerability in 'tpdel' Function

YXcms is a website management system based on PHP+MySql with a lightweight MVC design model. The yxcms V1.3.9 'tpdel' function is vulnerable to arbitrary file deletion. Since the function only passes a non-empty judgment on the string Mname fname, as long as the path is correct, arbitrary files c...

YXcms建站系统 showkbxx.asp 参数id SQL注入漏洞

No description provided by source...

yxcms 1.3.1版本 存储型XSS漏洞

No description provided by source...

新云cms（yxcms）建站系统V1.2.7 shownews.asp SQL注入漏洞

No description provided by source...

YXcms最新版任意文件删除导致花式getshell

简要描述： 某处任意删除导致花式getshell 来个雷好不好, --! 详细说明： 在用户上传头像的地方,已经上传了的用户如果再修改头像会删除之前的头像,相关代码如下： 在WOOYUN看到之前有人提交过,忽略了,但是程序里面却加上了验证代码, WooYun: YXcms最新版任意文件删除漏洞 但是没有用...没有循环替换,导致可以突破,如下图： 调试信息是我自己加的代码输出的, 可以看到当前上级目录的1.txt已经被删除, 然后我们开始花式getshell,首先删除重装锁定 重装以后在后台可以执行SQL语句,导致getshell1 https://imag...

YXcms 建站系统 逻辑错误 0元购物

简要描述： 逻辑错误，导致可以0元购物 详细说明： 使用官方demo站点做演示 http://demo.yxcms.net/ 实例如： 实例： http://www.lesuzhou.com/index.php http://www.k3led.cn/led/index.php http://qy002.demo.jz004.com/index.php http://www.sscproxy.com/index.php http://www.cctv1949.com/index.php 等 宝马x1 90...