EUVD-2020-14424

Malware in sbrugna...

CVE-2020-21656

XYHCMS v3.6 contains a stored cross-site scripting XSS vulnerability in the component xyhai.php?s=/Link/index...

CVE-2020-21656

XYHCMS v3.6 contains a stored cross-site scripting XSS vulnerability in the component xyhai.php?s=/Link/index...

CVE-2020-21656: Improper Neutralization of Input During Web Page Generation

XYHCMS v3.6 contains a stored cross-site scripting XSS vulnerability in the component xyhai.php?s=/Link/index...

PT-2021-10655

Name of the Vulnerable Software and Affected Versions: XYHCMS version 3.6 Description: The issue is related to a stored cross-site scripting XSS vulnerability. It affects the component xyhai.php?s=/Link/index. Recommendations: For XYHCMS version 3.6, update to a version that includes a fix for th...

CVE-2020-20586: Cross-Site Request Forgery (CSRF)

A cross site request forgery CSRF vulnerability in the /xyhai.php?s=/Auth/editUser URI of XYHCMS V3.6 allows attackers to edit any information of the administrator such as the name, e-mail, and password...

CVE-2018-14583: Cross-Site Request Forgery (CSRF)

xyhai.php?s=/Auth/addUser in XYHCMS 3.5 allows CSRF to add a background administrator account...

PT-2018-12593

Name of the Vulnerable Software and Affected Versions XYHCMS version 3.5 Description The issue allows for CSRF to add a background administrator account through the 'xyhai.php?s=/Auth/addUser' API endpoint. Recommendations For XYHCMS version 3.5, consider implementing proper CSRF protection...