CVE-2018-18725: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in admin/banner/editbanner?id=20 in YUNUCMS 1.1.5...

PT-2018-14603

Name of the Vulnerable Software and Affected Versions YUNUCMS version 1.1.5 Description A cross-site scripting XSS issue was found. The issue is related to the "admin/banner/editbanner?id=20" API endpoint. Recommendations For YUNUCMS version 1.1.5, update to a version that includes a fix for this...

CVE-2018-18725

Summary: CVE-2018-18725 is a cross-site scripting vulnerability affecting YUNUCMS 1.1.5, specifically in the path admin/banner/editbanner?id=20. The connected documents confirm an XSS issue in that component. NVD references assign CVSS scores: CVSS v2 base 3.5 (LOW) and CVSS v3 base 4.8 (MEDIUM),...

CVE-2017-5199

The editbanner feature in SolarWinds LEM aka SIEM through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl...

Design/Logic Flaw

The editbanner feature in SolarWinds LEM aka SIEM through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl...

CVE-2017-5199

CVE-2017-5199 affects SolarWinds Log and Event Manager (LEM) up to version 6.3.1. The vulnerability enables an authenticated remote attacker to execute arbitrary code by editing the file /usr/local/contego/scripts/mgrconfig.pl via the editbanner feature. The NVD entry notes a CVSS2 base score of ...

CVE-2017-5199: Incorrect Permission Assignment for Critical Resource

The editbanner feature in SolarWinds LEM aka SIEM through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl...

PT-2017-16384

Name of the Vulnerable Software and Affected Versions SolarWinds LEM aka SIEM versions prior to 6.3.1 Description The issue allows remote authenticated users to execute arbitrary code. This is achieved by exploiting the editbanner feature, which enables editing of the...