CVE-2018-19092

An issue was discovered in YzmCMS v5.2. It has XSS via a search/index/archives/pubtime/ query string, as demonstrated by the search/index/archives/pubtime/1526387722/page/1.html URI. NOTE: this does not obtain a user's cookie...

CVE-2018-19092

CVE-2018-19092 affects YzmCMS v5.2, with an XSS vulnerability triggered through the search/index/archives/pubtime/ query string (e.g., …/pubtime/1526387722/page/1.html). The issue is described as an XSS that does not obtain a user’s cookie. The connected records confirm the vulnerability details ...

Metinfo v5.2 /include/thumb.php 信息泄露漏洞

No description provided by source...

Nine smart built Station V5. 2 small holes two-vulnerability and early warning-the black bar safety net

One is the injection vulnerability, newshow. asp id parameter is the presence of injection vulnerabilities, you can guess the member table, get the user account password. The second is upload vulnerability in resource management where you can capture and upload the asp file...