CVE-2020-23370

YzmCMS 5.6 is affected. A stored XSS exists in the common/static/plugin/ueditor/1.4.3.3/php/controller.php action parameter, enabling an attacker to upload a SWF file that can be injected with arbitrary web script or HTML. The root cause is a stored XSS in that parameter; impact is described as e...

YzmCMS 跨站脚本漏洞

YzmCMS is a lightweight open source content management system based on PHP+Mysql architecture developed by Yuan Zhimeng alone. A stored cross-site scripting vulnerability exists in the common/static/plugin/ueditor/1.4.3.3/php/controller.php action parameter in YzmCMS version 5.6. The vulnerabilit...

CVE-2020-18084

Cross Site Scripting XSS in yzmCMS v5.2 allows remote attackers to execute arbitrary code by injecting commands into the "referer" field of a POST request to the component "/member/index/login.html" when logging in...

Cross site scripting

Cross Site Scripting XSS in yzmCMS v5.2 allows remote attackers to execute arbitrary code by injecting commands into the "referer" field of a POST request to the component "/member/index/login.html" when logging in...

CVE-2020-18084

Cross Site Scripting XSS in yzmCMS v5.2 allows remote attackers to execute arbitrary code by injecting commands into the "referer" field of a POST request to the component "/member/index/login.html" when logging in...

CVE-2020-18084

CVE-2020-18084 affects yzmCMS v5.2 and enables a Cross-Site Scripting (XSS) vulnerability in the login flow. An attacker can inject commands into the referer field of a POST to the component path “/member/index/login.html” during login, potentially leading to arbitrary code execution on the victi...

Yzmcms 跨站脚本漏洞

Yzmcms is an open source CMS Content Management System for Yzmcms individual developers. A cross-site scripting vulnerability exists in yzmcms v5.2, which can be exploited by a remote attacker to inject commands into the "referer" field of a POST request to the component "member index login.html"...

YzmCMS has an arbitrary file download vulnerability

YzmCMS is a lightweight open source content management system based on YZMPHP. YzmCMS has an arbitrary file download vulnerability that can only be exploited by attacks to obtain sensitive information...

Logic Flaw Vulnerability in YZMCMS Content Management System

YZMCMS content management system is an all-in-one website building system. A logic flaw vulnerability exists in the YZMCMS Content Management System, which can be exploited by an attacker to modify a user's password...

Information leakage vulnerability in YzmCMS

YzmCMS is a lightweight open source content management system based on PHP Mysql architecture, YzmCMS can run on Linux, Windows, MacOSX, Solaris and other platforms. YzmCMS information leakage vulnerability , attackers can use the vulnerability to obtain sensitive user information...

SSRF Vulnerability in YzmCMS v5.8

YzmCMS is a lightweight open source content management system based on PHP+Mysql architecture, YzmCMS can run on Linux, Windows, MacOSX, Solaris and other platforms. YzmCMS v5.8 suffers from an SSRF vulnerability. An attacker can exploit the vulnerability to probe intranet information and obtain...

XSS Vulnerability in YzmCMS

YzmCMS is a lightweight open source content management system based on PHP+Mysql architecture, YzmCMS can run on Linux, Windows, MacOSX, Solaris and other platforms. YzmCMS has an XSS vulnerability. Attackers can use the vulnerability to obtain sensitive information such as user cookies...

YzmCMS Cross-Site Scripting Vulnerability (CNVD-2020-66575)

YzmCMS is a lightweight open source content management system based on PHP+Mysql architecture developed by Yuan Zhimeng alone. A cross-site scripting vulnerability exists in the member submission feature in YzmCMS 5.5. No detailed vulnerability details are available at this time...

CVE-2020-22394

In YzmCMS v5.5 the member contribution function in the editor contains a cross-site scripting XSS vulnerability...

CVE-2020-22394

In YzmCMS v5.5 the member contribution function in the editor contains a cross-site scripting XSS vulnerability...

Cross site scripting

In YzmCMS v5.5 the member contribution function in the editor contains a cross-site scripting XSS vulnerability...

CVE-2020-22394

CVE-2020-22394 affects YzmCMS v5.5, where the member contribution function in the editor is susceptible to cross-site scripting (XSS). The connected sources confirm an XSS vulnerability in the editor’s member submission feature, with no detailed exploit vector or affected versions beyond v5.5 spe...

CVE-2020-22394

In YzmCMS v5.5 the member contribution function in the editor contains a cross-site scripting XSS vulnerability...

YzmCMS 跨站脚本漏洞

YzmCMS is a lightweight open source content management system based on PHP+Mysql architecture developed by Yuan Zhimeng alone. A cross-site scripting vulnerability exists in the member submission feature in YzmCMS 5.5. No detailed vulnerability details are available at this time...

SQL Injection Vulnerability in YzmCMS

YzmCMS is an open source CMS developed by Chinese programmer Yuan Zhimeng. YzmCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...