Cross-site scripting vulnerability in Yzmcms frontend

YzmCMS is a lightweight and open source content management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. Yzmcms frontend has cross-site scripting vulnerabilities. Attackers can insert malicious js code in the page to obtain user cookies an...

SQL Injection Vulnerability in YzmCMS /member/account.php Page

YzmCMS is a lightweight and open source content management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. YzmCMS /member/account.php page has a SQL injection vulnerability. Because the /member/account.php page does not filter parameters, an...

SQL Injection Vulnerability in YzmCMS email.php

YzmCMS is a lightweight and open source content management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. A SQL injection vulnerability exists in YzmCMS email.php. An attacker can exploit the vulnerability to obtain sensitive information...