EUVD-2020-13372

Malware in sbrugna...

EUVD-2020-14424

Malware in sbrugna...

CVE-2020-20586

A cross site request forgery CSRF vulnerability in the /xyhai.php?s=/Auth/editUser URI of XYHCMS V3.6 allows attackers to edit any information of the administrator such as the name, e-mail, and password...

Cross site scripting

XYHCMS v3.6 contains a stored cross-site scripting XSS vulnerability in the component xyhai.php?s=/Link/index...

Cross site request forgery (csrf)

A cross site request forgery CSRF vulnerability in the /xyhai.php?s=/Auth/editUser URI of XYHCMS V3.6 allows attackers to edit any information of the administrator such as the name, e-mail, and password...

CVE-2020-20586

A cross site request forgery CSRF vulnerability in the /xyhai.php?s=/Auth/editUser URI of XYHCMS V3.6 allows attackers to edit any information of the administrator such as the name, e-mail, and password...