409 matches found
Cross site scripting
A cross-site scripting XSS vulnerability in the /banner/add.html component of YzmCMS v5.3 allows attackers to execute arbitrary web scripts or HTML...
CVE-2020-19951
A cross-site request forgery CSRF in /controller/pay.class.php of YzmCMS v5.5 allows attackers to access sensitive components of the application...
CVE-2020-19951
The CVE-2020-19951 entry concerns a CSRF vulnerability in YzmCMS v5.5, specifically in /controller/pay.class.php. The issue enables an attacker to access sensitive components of the application due to cross-site request forgery. Connected sources consistently reference the same vulnerability in Y...
CVE-2020-19950
A cross-site scripting XSS vulnerability in the /banner/add.html component of YzmCMS v5.3 allows attackers to execute arbitrary web scripts or HTML...
CVE-2020-19950
CVE-2020-19950 applies to YzmCMS v5.3, specifically the vulnerable /banner/add.html component. The connected documents confirm a cross-site scripting (XSS) vulnerability that allows an attacker to execute arbitrary web scripts or HTML in the context of the affected user. The available sources do ...
CVE-2020-19949
YzmCMS v5.3 contains a cross-site scripting (XSS) vulnerability in the /link/add.html component. The issue allows attackers to execute arbitrary web scripts or HTML. The CVE entry is supported by multiple sources (NVD, Red Hat, CNVD, OSV, CNVD) that describe the same flaw. The provided connected ...
CVE-2020-19949
A cross-site scripting XSS vulnerability in the /link/add.html component of YzmCMS v5.3 allows attackers to execute arbitrary web scripts or HTML...
Yzmcms 跨站脚本漏洞
YzmCMS is a lightweight open source content management system based on PHP Mysql architecture developed solely by Yuan Zhimeng. cross-site scripting vulnerability exists in the /link/add.html component of YzmCMS version 5.3. An attacker can use this vulnerability to execute arbitrary Web scripts ...
YzmCMS 跨站脚本漏洞
YzmCMS is a lightweight open source content management system based on PHP Mysql architecture developed solely by Yuan Zhimeng. cross-site scripting vulnerability exists in the /banner/add.html component of YzmCMS version 5.3. An attacker can exploit this vulnerability to execute arbitrary Web...
YzmCMS v5.5/controller/pay.class.php组件 跨站请求伪造漏洞
YzmCMS is a lightweight open source content management system based on PHP Mysql architecture developed solely by Yuan Zhimeng. A cross-site request forgery vulnerability exists in /controller/pay.class.php in YzmCMS version 5.5. An attacker can use this vulnerability to access sensitive componen...
YzmCMS server-side request forgery vulnerability
YzmCMS is a lightweight open source content management system based on PHP Mysql architecture developed solely by Yuan Zhimeng. a server-side request forgery vulnerability exists in the grabimage function in YzmCMS version 5.5. No detailed vulnerability details are provided...
CVE-2020-20341
YzmCMS v5.5 contains a server-side request forgery SSRF in the grabimage function...
CVE-2020-20341
YzmCMS v5.5 contains a server-side request forgery SSRF in the grabimage function...
Server side request forgery (ssrf)
YzmCMS v5.5 contains a server-side request forgery SSRF in the grabimage function...
CVE-2020-20341
CVE-2020-20341 affects YzmCMS v5.5 with a server-side request forgery (SSRF) in the grab_image() function. The issue is documented across multiple sources (NVD, Red Hat, CNVD, etc.), describing an SSRF vulnerability in that specific function. The provided references do not include a patched versi...
CVE-2020-20341
YzmCMS v5.5 contains a server-side request forgery SSRF in the grabimage function...
Yzmcms 代码问题漏洞
YzmCMS is a lightweight open source content management system based on PHP Mysql architecture developed solely by Yuan Zhimeng. a server-side request forgery vulnerability exists in the grabimage function in YzmCMS version 5.5. No detailed vulnerability details are provided...
CVE-2020-19118
Cross Site Scripting XSS vulnerabiity in YzmCMS 5.2 via the sitecode parameter in admin/index/init.html...