Lucene search
+L

26 matches found

CNNVD
CNNVD
added 2021/08/12 12:0 a.m.5 views

bycms 跨站请求伪造漏洞

bycms is a simple, easy-to-use content management system. A cross-site request forgery vulnerability exists in bycms v1.3, which can be triggered by an attacker via admin.php/systems/index/moduleid/70/groupid/1.html...

6.8CVSS6.5AI score0.00481EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/08/12 12:0 a.m.11 views

bycms 跨站请求伪造漏洞

bycms is a simple, easy-to-use content management system. bycms v1.3.0 has a cross-site request forgery vulnerability, an attacker can add an administrator account via admin.php/ucenter/add.html...

6.8CVSS6.5AI score0.00481EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/08/12 12:0 a.m.5 views

bycms 跨站脚本漏洞

bycms is a simple, easy-to-use content management system. A cross-site scripting vulnerability exists in bycms v3.0.4, which originates from the title parameter in the edit function in Document.php...

4.8CVSS4.8AI score0.00527EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/11/10 12:0 a.m.4 views

SQL Injection Vulnerability in bycms Content Management System

Beyoncms bycms content management system is a content management system. The bycms content management system suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to gain server control privileges...

8.2AI score
SaveExploits0
CNVD
CNVD
added 2017/08/24 12:0 a.m.3 views

Database Password Disclosure Vulnerability in Bycms comment-add and Comment.php Methods

Bycms Beyuncms is a content management system based on thinkphp 5.0.9. A database password disclosure vulnerability exists in the Bycms comment-add and Comment.php methods. An attacker can exploit this vulnerability to obtain the database connection account and password...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2017/08/24 12:0 a.m.4 views

SSRF vulnerability in Bycms user-post method

Bycms Beyoncms is a content management system based on thinkphp 5.0.9. An SSRF vulnerability exists in the Bycms user-post method. An attacker can exploit the vulnerability to detect the database version number and open port service information...

6.8AI score
SaveExploits0
Rows per page
Query Builder