412 matches found
CVE-2019-16678
admin/urlrule/add.html in YzmCMS 5.3 allows CSRF with a resultant denial of service by adding a superseding route...
Cross site request forgery (csrf)
admin/urlrule/add.html in YzmCMS 5.3 allows CSRF with a resultant denial of service by adding a superseding route...
CVE-2019-16678
admin/urlrule/add.html in YzmCMS 5.3 allows CSRF with a resultant denial of service by adding a superseding route...
CVE-2019-16678
CVE-2019-16678 affects YzmCMS 5.3. The issue is a Cross-Site Request Forgery in admin/urlrule/add.html that enables a denial of service via adding a superseding route. The public descriptions consistently state CSRF as the root cause; no explicit exploitation details or in‑the‑wild proof are prov...
SQL Injection Vulnerability in YzmCMS Backend da***.cl***.php
YzmCMS is a lightweight and open source content management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. YzmCMS backend da.cl.php has a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the...
YzmCMS v5.3 backend co***_co***.cl***.p*** file has arbitrary file read vulnerability
YzmCMS is a lightweight and open source content management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. YzmCMS v5.3 backend coco.cl.p file there is an arbitrary file reading vulnerability , an attacker can use this vulnerability to obtain...
File write vulnerability in YzmCmsV5.3 backend
YzmCMS is a lightweight and open source content management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. YzmCmsV5.3 backend file writing vulnerability , attackers can exploit the vulnerability can be obtained server privileges...
YzmCMS Cross-Site Scripting Vulnerability (CNVD-2022-21178)
YzmCMS is a lightweight open source content management system based on PHP+Mysql architecture developed by Yuan Zhimeng alone. YzmCMS 5.1 suffers from a cross-site scripting vulnerability. Attackers can use this vulnerability through the admin/systemmanage/userconfigadd.html title parameter to...
CVE-2018-16247
YzmCMS 5.1 has XSS via the admin/systemmanage/userconfigadd.html title parameter...
CVE-2018-16247
YzmCMS 5.1 has XSS via the admin/systemmanage/userconfigadd.html title parameter...
Design/Logic Flaw
YzmCMS 5.1 has XSS via the admin/systemmanage/userconfigadd.html title parameter...
CVE-2018-16247
YzmCMS 5.1 has XSS via the admin/systemmanage/userconfigadd.html title parameter...
CVE-2018-16247
CVE-2018-16247 affects YzmCMS 5.1 with a Cross-Site Scripting (XSS) vulnerability exploitable via the admin/system_manage/user_config_add.html title parameter. The connected records corroborate an XSS issue but do not provide concrete exploit details, affected versions beyond 5.1, or remediation ...
CVE-2019-9660
Stored XSS exists in YzmCMS 5.2 via the admin/category/edit.html "catname" parameter...
Cross site scripting
Stored XSS exists in YzmCMS 5.2 via the admin/category/edit.html "catname" parameter...
CVE-2019-9661
Stored XSS exists in YzmCMS 5.2 via the admin/systemmanage/userconfigedit.html "value" parameter,...
CVE-2019-9661
Stored XSS exists in YzmCMS 5.2 via the admin/systemmanage/userconfigedit.html "value" parameter,...
Cross site scripting
Stored XSS exists in YzmCMS 5.2 via the admin/systemmanage/userconfigedit.html "value" parameter,...