81 matches found
EUVD-2026-114736
A security flaw has been discovered in ken678 YznCMS up to 2.2.0. The affected element is the function Backend of the file app/admin/controller/auth/Group.php of the component Auth Group Handler. Performing a manipulation results in improper privilege management. The attack can be initiated...
CVE-2026-120185 ken678 YznCMS Auth Group Group.php Backend privileges management
A security flaw has been discovered in ken678 YznCMS up to 2.2.0. The affected element is the function Backend of the file app/admin/controller/auth/Group.php of the component Auth Group Handler. Performing a manipulation results in improper privilege management. The attack can be initiated...
CVE-2026-120185
A security flaw in ken678 YznCMS (up to version 2.2.0) allows for improper privilege management due to a vulnerability in the Backend function of the app/admin/controller/auth/Group.php file within the Auth Group Handler component. An attacker can initiate this attack remotely . To remediate this...
CVE-2026-120185: ken678 YznCMS: A security flaw has been discovered in ken678 YznCMS up to 2.2.0
A security flaw has been discovered in ken678 YznCMS up to 2.2.0. The affected element is the function Backend of the file app/admin/controller/auth/Group.php of the component Auth Group Handler. Performing a manipulation results in improper privilege management. The attack can be initiated...
PT-2026-134680
A security flaw has been discovered in ken678 YznCMS up to 2.2.0. The affected element is the function Backend of the file app/admin/controller/auth/Group.php of the component Auth Group Handler. Performing a manipulation results in improper privilege management. The attack can be initiated...
Ventureman Studio YZNCMS permission and access control vulnerability
The YZNCMS 2.2.0 and earlier versions of the Ookami Studio contain a vulnerability related to permission escalation and access control. This issue stems from improper handling of the Backend function within the file app/admin/controller/auth/Group.php in the Auth Group Handler component, leading ...
EUVD-2017-8738
Malware in sbrugna...
EUVD-2025-5948
Malicious code in bioql PyPI...
CVE-2024-41353
phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\groups\edit-group.php...
CVE-2025-22930: Improper Neutralization of Special Elements used in an SQL Command
OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the groupid parameter at /messaging/Group.php...
CVE-2025-22930
OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the groupid parameter at /messaging/Group.php...
CVE-2025-22930
OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the groupid parameter at /messaging/Group.php...
CVE-2025-25916
wuzhicms v4.1.0 has a Cross Site Scripting XSS vulnerability in del function in \coreframe\app\member\admin\group.php...
CVE-2025-25916
wuzhicms v4.1.0 has a Cross Site Scripting XSS vulnerability in del function in \coreframe\app\member\admin\group.php...
CVE-2025-25916
wuzhicms v4.1.0 has a Cross Site Scripting XSS vulnerability in del function in \coreframe\app\member\admin\group.php...
CVE-2025-25916
wuzhicms v4.1.0 has a Cross Site Scripting XSS vulnerability in del function in \coreframe\app\member\admin\group.php...
CVE-2025-25916: Improper Neutralization of Input During Web Page Generation
wuzhicms v4.1.0 has a Cross Site Scripting XSS vulnerability in del function in \coreframe\app\member\admin\group.php...
CVE-2025-25916
wuzhicms v4.1.0 has a Cross Site Scripting XSS vulnerability in del function in \coreframe\app\member\admin\group.php...