PT-2022-21217 · Unknown · Youdiancms

Name of the Vulnerable Software and Affected Versions: YoudianCMS version 9.5.0 Description: The issue is a SQL injection vulnerability. It occurs via the MailSendID parameter at the "/App/Lib/Action/Admin/MailAction.class.php" endpoint. Recommendations: For YoudianCMS version 9.5.0, consider...

PT-2022-21216 · Unknown · Youdiancms

Name of the Vulnerable Software and Affected Versions: YoudianCMS version 9.5.0 Description: A SQL injection issue was discovered via the id parameter at the "/App/Lib/Action/Admin/SiteAction.class.php" endpoint. This allows for potential exploitation. No information is provided about the estimat...

YouDianCMS SQL注入漏洞

YouDianCMS is a website CMS. A SQL injection vulnerability exists in YouDianCMS v9.5.0, which originates from the lack of validation of the IdList parameter at /App/Lib/Action/Home/ApiAction.class.php against external SQL input. This vulnerability can be exploited to execute illegal SQL commands ...

YouDianCMS SQL注入漏洞

YouDianCMS is a website CMS. A SQL injection vulnerability exists in YoudianCMS v9.5.0, which originates from the lack of validation of the MailSendID parameter at /App/Lib/Action/Admin/MailAction.class.php against external SQL input. This vulnerability can be exploited by attackers to execute...

YouDianCMS SQL Injection Vulnerability (CNVD-2021-67503)

YouDianCMS is a web CMS. version 8.0 of YouDianCMS is vulnerable to SQL injection, which stems from a lack of search keyword filtering in the search bar and can be exploited to obtain sensitive database information...

CVE-2020-18116

A lack of filtering for searched keywords in the search bar of YouDianCMS 8.0 allows attackers to perform SQL injection...

CVE-2020-18116

A lack of filtering for searched keywords in the search bar of YouDianCMS 8.0 allows attackers to perform SQL injection...

Sql injection

A lack of filtering for searched keywords in the search bar of YouDianCMS 8.0 allows attackers to perform SQL injection...

CVE-2020-18116

Summary: CVE-2020-18116 affects YouDianCMS 8.0. The root cause is a lack of filtering for search keywords in the search bar, enabling SQL injection. Impact (as stated): Potential exposure of sensitive database information due to unauthenticated SQL injection in the search functionality. Exploitat...

CVE-2020-18116

A lack of filtering for searched keywords in the search bar of YouDianCMS 8.0 allows attackers to perform SQL injection...

YouDianCMS SQL注入漏洞

YouDianCMS is a web CMS. version 8.0 of YouDianCMS is vulnerable to SQL injection, which stems from a lack of search keyword filtering in the search bar and can be exploited to obtain sensitive database information...

Code execution vulnerability in youdianCMS (CNVD-2021-51410)

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS has a code execution vulnerability that can be exploited by attackers to gain control ...

File Upload Vulnerability in YouDianCMS (CNVD-2021-52065)

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS file upload vulnerability, attackers can use the vulnerability to obtain server contro...

Unauthorized Access Vulnerability in YouDianCMS

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS has unauthorized access vulnerability. Attackers can use the vulnerability to obtain...

YouDianCMS suffers from SQL injection vulnerability (CNVD-2021-46899)

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS has SQL injection vulnerability. Attackers can use the vulnerability to obtain sensiti...

Command Execution Vulnerability in YouDianCMS (CNVD-2021-45167)

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS has a command execution vulnerability that can be exploited by attackers to gain contr...

YouDianCMS suffers from SQL injection vulnerability (CNVD-2021-43950)

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS has SQL injection vulnerability. Attackers can use this vulnerability to obtain...

Command Execution Vulnerability in YouDianCMS 9.2.6

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS 9.2.6 has a command execution vulnerability that can be exploited by attackers to gain...

SQL Injection Vulnerability in YouDianCMS 9.2.6

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS 9.2.6 has a SQL injection vulnerability, which can be exploited by attackers to obtain...

Command Execution Vulnerability in YouDianCMS

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS has a command execution vulnerability. Attackers can use this vulnerability to obtain...