CVE-2018-8078

YzmCMS 3.7 has Stored XSS via the title parameter to advertisement/adver/edit.html...

CVE-2018-8078

CVE-2018-8078 affects YzmCMS 3.7, where a Stored XSS vulnerability exists in the title parameter of advertisement/adver/edit.html. The root cause is unescaped user input in the title field, enabling arbitrary script/HTML injection. Documented impact is XSS with low to medium severity depending on...

PT-2018-18422

Name of the Vulnerable Software and Affected Versions: YzmCMS version 3.7 Description: The issue is related to Stored XSS, which occurs via the title parameter to the "advertisement/adver/edit.html" endpoint. Recommendations: For YzmCMS version 3.7, update the software to a version that includes ...

CVE-2018-8078: Improper Neutralization of Input During Web Page Generation

YzmCMS 3.7 has Stored XSS via the title parameter to advertisement/adver/edit.html...

Uc365 website category navigation system adver_name parameter exists sql injection vulnerability

Uc365 website classification and navigation system is a cross-platform open source software, based on PHP + MYSQL development and construction of open source website classification and catalog management system. Uke365 website category navigation system advername parameter there is a sql injectio...