9 matches found
CVE-2019-5310
YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php because crafted data can be written to the sys.php file, as demonstrated by sitetitle in an admin/system/basic POST request...
Cross site request forgery (csrf)
YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php because crafted data can be written to the sys.php file, as demonstrated by sitetitle in an admin/system/basic POST request...
CVE-2019-5310
YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php because crafted data can be written to the sys.php file, as demonstrated by sitetitle in an admin/system/basic POST request...
PT-2019-17573
Name of the Vulnerable Software and Affected Versions YUNUCMS version 1.1.8 Description The issue allows for XSS due to crafted data being written to the sys.php file. This can be demonstrated by modifying the site title in an admin/system/basic POST request to "/admin/system/basic"...
CVE-2018-18720
An XSS issue was discovered in index.php/admin/system/basic in YUNUCMS 1.1.5...
Cross site scripting
An XSS issue was discovered in index.php/admin/system/basic in YUNUCMS 1.1.5...
YUNUCMS cross-site scripting vulnerability (CNVD-2018-23272)
YUNUCMS is a three-network, self-substation system of open source content management system. YUNUCMS 1.1.5 in index.php/admin/system/basic cross-site scripting vulnerability, attackers can exploit the vulnerability to carry out cross-site attacks...
PT-2018-14598
Name of the Vulnerable Software and Affected Versions YUNUCMS version 1.1.5 Description A cross-site scripting XSS issue was found in the index.php/admin/system/basic endpoint of YUNUCMS. Recommendations For YUNUCMS version 1.1.5, update to a newer version that contains a fix for this issue...
