Lucene search
K

6 matches found

OSV
OSV
added 2019/01/04 2:29 p.m.2 views

CVE-2019-5310

YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php because crafted data can be written to the sys.php file, as demonstrated by sitetitle in an admin/system/basic POST request...

6.1CVSS6.4AI score0.0024EPSS
Exploits1References1
Prion
Prion
added 2019/01/04 2:29 p.m.17 views

Cross site request forgery (csrf)

YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php because crafted data can be written to the sys.php file, as demonstrated by sitetitle in an admin/system/basic POST request...

4.3CVSS5.9AI score0.0024EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2019/01/04 2:0 p.m.14 views

CVE-2019-5310

YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php because crafted data can be written to the sys.php file, as demonstrated by sitetitle in an admin/system/basic POST request...

6AI score0.0024EPSS
Exploits1References1
OSV
OSV
added 2018/10/29 12:29 p.m.1 views

CVE-2018-18720

An XSS issue was discovered in index.php/admin/system/basic in YUNUCMS 1.1.5...

4.8CVSS5.8AI score
Exploits0References1
Prion
Prion
added 2018/10/29 12:29 p.m.13 views

Cross site scripting

An XSS issue was discovered in index.php/admin/system/basic in YUNUCMS 1.1.5...

3.5CVSS4.8AI score0.00235EPSS
Exploits1References1Affected Software1
CNVD
CNVD
added 2018/10/29 12:0 a.m.1 views

YUNUCMS cross-site scripting vulnerability (CNVD-2018-23272)

YUNUCMS is a three-network, self-substation system of open source content management system. YUNUCMS 1.1.5 in index.php/admin/system/basic cross-site scripting vulnerability, attackers can exploit the vulnerability to carry out cross-site attacks...

4.8CVSS4.8AI score0.00235EPSS
Exploits1References1
Rows per page
Query Builder