PT-2019-14763

Name of the Vulnerable Software and Affected Versions YzmCMS version 5.3 Description The issue in YzmCMS allows for a Cross-Site Request Forgery CSRF attack, which can lead to a denial of service. This occurs when an attacker can add a superseding route, affecting the system's functionality. The...

CVE-2019-16678: Cross-Site Request Forgery (CSRF)

admin/urlrule/add.html in YzmCMS 5.3 allows CSRF with a resultant denial of service by adding a superseding route...

PHPCMS V9 urlrule.php file SQL injection vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. A SQL injection vulnerability exists in the PHPCMS V9 urlrule.php file, which allows attackers to exploit the vulnerability to...

phpcms 2 0 0 8 product.php the pagesize parameter code injection vulnerability-vulnerability warning-the black bar safety net

SSV-Appdir: phpcms Published: 2011-10-12 Affected version: phpcms 2 0 0 8 Vulnerability description: phpcms 2 0 0 8 of the code due to the template parameter improper handling can lead to arbitrary execution of arbitrary code file. The specific code triggering the path is this: phpcms/yp/product...