EUVD-2019-20071

News Website Script 2.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the news ID parameter. Attackers can send GET requests to index.php/show/news/ with malicious SQL statements to extract sensitive...

YUNUCMS cross-site scripting vulnerability (CNVD-2019-00564)

YUNUCMS is China Yunyou YUNU network technology company of a set of open source enterprise station building content management system CMS. YUNUCMS1.1.8 version of the app/index/controller/Show.php file there is a cross-site scripting vulnerability, a remote attacker can send the 'cw' parameter to...

CVE-2019-5311

An issue was discovered in YUNUCMS V1.1.8. app/index/controller/Show.php has an XSS vulnerability via the index.php/index/show/index cw parameter...

CVE-2019-5311: Improper Neutralization of Input During Web Page Generation

An issue was discovered in YUNUCMS V1.1.8. app/index/controller/Show.php has an XSS vulnerability via the index.php/index/show/index cw parameter...

PT-2019-17574

Name of the Vulnerable Software and Affected Versions YUNUCMS version 1.1.8 Description An issue was discovered in YUNUCMS, where the app/index/controller/Show.php file has a cross-site scripting XSS vulnerability. This vulnerability can be exploited via the cw parameter in the...

DEW-NEWphpLinks 2.0 XSS / LFI

------------------------------------------------------------------------------------------------ DEW-NEWphpLinks 2.0 LFI/XSS Multiple Remote Vulnerabilities http://www.dew-code.com ----------------------------------------------------------------------------------------------- Bug founded by d3v1l...