Lucene search
+L

3 matches found

Cvelist
Cvelist
•added 2018/03/13 8:00 a.m.•42 views

CVE-2018-8078

YzmCMS 3.7 has Stored XSS via the title parameter to advertisement/adver/edit.html...

5.2AI score0.00798EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2018/03/13 12:00 a.m.•5 views

PT-2018-18422

Name of the Vulnerable Software and Affected Versions: YzmCMS version 3.7 Description: The issue is related to Stored XSS, which occurs via the title parameter to the "advertisement/adver/edit.html" endpoint. Recommendations: For YzmCMS version 3.7, update the software to a version that includes ...

5.4CVSS0.00798EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/13 12:00 a.m.•12 views

CVE-2018-8078: Improper Neutralization of Input During Web Page Generation

YzmCMS 3.7 has Stored XSS via the title parameter to advertisement/adver/edit.html...

5.4CVSS5.9AI score0.00798EPSS
SaveExploits1References2
Rows per page
Query Builder