CVE-2024-7329 YouDianCMS image_upload.php unrestricted upload

A vulnerability, which was classified as critical, was found in YouDianCMS 7. Affected is an unknown function of the file /Public/ckeditor/plugins/multiimage/dialogs/imageupload.php. The manipulation of the argument files leads to unrestricted upload. It is possible to launch the attack remotely...

CVE-2024-7329

YouDianCMS 7 contains a critical issue in an unknown function of /Public/ckeditor/plugins/multiimage/dialogs/image_upload.php where manipulating the files parameter leads to unrestricted uploads. A remote attacker can exploit this; multiple sources note that exploits have been disclosed publicly....

CVE-2024-7329 YouDianCMS image_upload.php unrestricted upload

A vulnerability, which was classified as critical, was found in YouDianCMS 7. Affected is an unknown function of the file /Public/ckeditor/plugins/multiimage/dialogs/imageupload.php. The manipulation of the argument files leads to unrestricted upload. It is possible to launch the attack remotely...

CVE-2024-7328

The CVE-2024-7328 entry concerns YouDianCMS version 7. The vulnerability arises from how the file "/t.php?action=phpinfo" is processed, enabling information disclosure. Several Connected documents confirm remote feasibility and public disclosure of the exploit, indicating an information disclosur...

CVE-2024-7328 YouDianCMS information disclosure

A vulnerability, which was classified as problematic, has been found in YouDianCMS 7. This issue affects some unknown processing of the file /t.php?action=phpinfo. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public...

CVE-2024-7328 YouDianCMS information disclosure

A vulnerability, which was classified as problematic, has been found in YouDianCMS 7. This issue affects some unknown processing of the file /t.php?action=phpinfo. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public...

PT-2024-38272 · Unknown · Youdiancms

Name of the Vulnerable Software and Affected Versions: YouDianCMS version 7 Description: A critical issue has been found, affecting the curl exec function in the file /App/Core/Extend/Function/ydLib.php. The manipulation of the url argument leads to server-side request forgery. This issue can be...

PT-2024-38271 · Ckeditor +1 · Ckeditor +1

Name of the Vulnerable Software and Affected Versions: YouDianCMS version 7 Description: A critical issue was found in an unknown function of the file /Public/ckeditor/plugins/multiimage/dialogs/image upload.php. The manipulation of the files argument leads to unrestricted upload. It is possible ...

YouDianCMS 代码问题漏洞

YouDianCMS YouDian CMS is a website builder from China YouDian Company. A code issue vulnerability exists in YouDianCMS version 7, which stems from the parameter url in the file curlexec /App/Core/Extend/Function/ydLib.php that can lead to server-side request forgery...

YouDianCMS 信息泄露漏洞

YouDianCMS YouDian CMS is a website builder from China YouDian Company. An information disclosure vulnerability exists in YouDianCMS version 7, which originates from an unknown handling of the file /t.php?action=phpinfo that can lead to information disclosure...

YouDianCMS 代码问题漏洞

YouDianCMS YouDian CMS is a website builder from China YouDian Company. A code issue vulnerability exists in YouDianCMS version 7, which originates from the parameter files in the file /Public/ckeditor/plugins/multiimage/dialogs/imageupload.php that can lead to unrestricted uploads...

File Upload Vulnerability in YouDianCMS (CNVD-2024-34730)

YouDianCMS is a domestic open source five-station outstanding solution. YouDianCMS has a file upload vulnerability that can be exploited by attackers to execute malicious php code to achieve remote code execution...

CVE-2024-3117

A vulnerability classified as critical was found in YouDianCMS up to 9.5.12. This vulnerability affects unknown code of the file App\Lib\Action\Admin\ChannelAction.class.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has...

CVE-2024-3117

A vulnerability classified as critical was found in YouDianCMS up to 9.5.12. This vulnerability affects unknown code of the file App\Lib\Action\Admin\ChannelAction.class.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has...

CVE-2024-3117 YouDianCMS ChannelAction.class.php unrestricted upload

A vulnerability classified as critical was found in YouDianCMS up to 9.5.12. This vulnerability affects unknown code of the file App\Lib\Action\Admin\ChannelAction.class.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has...

CVE-2024-3117

CVE-2024-3117 affects YouDianCMS up to version 9.5.12. The vulnerability resides in the file handling path for ChannelAction.class.php (as reported across sources with slightly different path notation) and is triggered by manipulating the file argument, leading to unrestricted file upload. Remote...

CVE-2024-3117 YouDianCMS ChannelAction.class.php unrestricted upload

A vulnerability classified as critical was found in YouDianCMS up to 9.5.12. This vulnerability affects unknown code of the file App\Lib\Action\Admin\ChannelAction.class.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has...

PT-2024-23810 · Unknown · Youdiancms

Name of the Vulnerable Software and Affected Versions: YouDianCMS versions up to 9.5.12 Description: A critical issue was found in YouDianCMS, affecting the file AppLibActionAdminChannelAction.class.php. The manipulation of the file argument leads to unrestricted upload. This issue can be exploit...

YouDianCMS 代码问题漏洞

YouDianCMS is a website CMS. YouDianCMS 9.5.12 and earlier versions have a code issue vulnerability that stems from a file upload vulnerability in the parameter file of the file AppLibActionAdminChannelAction.class.php...

Command Execution Vulnerability in YouDianCMS of Changsha YouDian Software Technology Co.

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. Changsha YouDianCMS has a command execution vulnerability that can be exploited by attackers to...