YUNUCMS Cross-Site Scripting Vulnerability

YUNUCMS is China Yunyou YUNU network technology company of a set of open source enterprise station building content management system CMS. YUNUCMS version 1.0.7 cross-site scripting vulnerabilities. A remote attacker can inject arbitrary Web script or HTML with the help of content headings on the...

CVE-2018-9993

YUNUCMS 1.0.7 has XSS via the content title on an admin/content/addcontent/cid/ page aka a news center page...

PT-2012-3840

Name of the Vulnerable Software and Affected Versions Drupal versions 7.x before 7.14 Description The issue allows remote authenticated users with the "Access the content overview page" permission to read all published nodes by accessing the admin/content page, due to improper access restriction ...

CVE-2012-2153: Undefined Security Weakness

Drupal 7.x before 7.14 does not properly restrict access to nodes in a list when using a "contributed node access module," which allows remote authenticated users with the "Access the content overview page" permission to read all published nodes by accessing the admin/content page...