3 matches found
YUNUCMS Cross-Site Scripting Vulnerability
YUNUCMS is China Yunyou YUNU network technology company of a set of open source enterprise station building content management system CMS. YUNUCMS version 1.0.7 cross-site scripting vulnerabilities. A remote attacker can inject arbitrary Web script or HTML with the help of content headings on the...
CVE-2018-9993
YUNUCMS 1.0.7 has XSS via the content title on an admin/content/addcontent/cid/ page aka a news center page...
CVE-2012-2153: Undefined Security Weakness
Drupal 7.x before 7.14 does not properly restrict access to nodes in a list when using a "contributed node access module," which allows remote authenticated users with the "Access the content overview page" permission to read all published nodes by accessing the admin/content page...