YzmCMS Cross-Site Scripting Vulnerability (CNVD-2018-26781)

YzmCMS is an open source CMS Content Management System developed by Chinese programmer Yuan Zhimeng. A cross-site scripting vulnerability exists in YzmCMS version 5.2, which can be exploited by a remote attacker to inject arbitrary Web script or HTML by sending the 'searinfo' parameter to the...

CVE-2018-19544

JEECMS 9.3 has CSRF via the api/admin/content/save URI to add news...

XiaoCms Cross-Site Request Forgery Vulnerability

XiaoCms is a lightweight content management system CMS based on PHP and MySQL and capable of running on Linux, Windows and other platforms. XiaoCms 20141229 version of admin/index.php?c=content&a=add&catid=3 URL has a cross-site request forgery vulnerability, which can be exploited by remote...

Cross site request forgery (csrf)

An issue was discovered in XiaoCms 20141229. admin/index.php?c=content&a=add&catid=3 has CSRF, as demonstrated by entering news via the datacontent parameter...

CVE-2018-19192

An issue was discovered in XiaoCms 20141229. admin/index.php?c=content&a=add&catid=3 has CSRF, as demonstrated by entering news via the datacontent parameter...

CVE-2018-18722

An XSS issue was discovered in admin/content/editcontent?id=29&gopage=1 in YUNUCMS 1.1.5...

YUNUCMS cross-site scripting vulnerability (CNVD-2018-23274)

YUNUCMS is a three-network, self-substation system of open source content management system. YUNUCMS 1.1.5 in admin/content/editcontent?id=29&gopage=1 there is a cross-site scripting vulnerability , attackers can exploit the vulnerability to carry out cross-site attacks...

CVE-2018-18722

YUNUCMS 1.1.5 contains an XSS vulnerability in admin/content/editcontent?id=29&gopage=1. The provided documents do not include exploitation details, affected components beyond this URL, or any fix/mitigation information.

YUNUCMS Cross-Site Scripting Vulnerability

YUNUCMS is China Yunyou YUNU network technology company of a set of open source enterprise station building content management system CMS. YUNUCMS version 1.0.7 cross-site scripting vulnerabilities. A remote attacker can inject arbitrary Web script or HTML with the help of content headings on the...

CVE-2018-9993

YUNUCMS 1.0.7 has XSS via the content title on an admin/content/addcontent/cid/ page aka a news center page...

CVE-2017-11327

An issue was discovered in Tilde CMS 1.0.1. It is possible to retrieve sensitive data by using direct references. A low-privileged user can load PHP resources such as admin/content.php and admin/content.php?method=ftpupload...