59 matches found
PT-2021-10471 · Yccms · Yccms
Name of the Vulnerable Software and Affected Versions: yccms version 3.3 Description: The issue is related to an unrestricted file upload vulnerability. It is caused by the xhUp function's improper judgment of the request parameters, which can trigger remote code execution. Recommendations: For...
SQL Injection Vulnerability in YCCMS Backend (CNVD-2020-53330)
YCCMS is a PHP version of a lightweight CMS builder. There is a SQL injection vulnerability in the background of YCCMS, which can be exploited by attackers to obtain sensitive database information...
SQL Injection Vulnerability in YCCMS Backend
YCCMS is a PHP version of a lightweight website building system. There is a SQL injection vulnerability in the background of YCCMS, which can be exploited by attackers to obtain sensitive database information...
YCCMS suffers from sql injection vulnerability (CNVD-2020-50923 )
YCCMS is a PHP version of a lightweight CMS builder. YCCMS has a sql injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
YCCMS suffers from a file upload vulnerability (CNVD-2020-48966)
YCCMS is a PHP version of a lightweight CMS builder. YCCMS has a file upload vulnerability, which can be exploited by attackers to upload malicious files to gain server control privileges...
Command Execution Vulnerability in YCCMS
YCCMS is a version of PHP5 + MYSQL as the technical basis for the development of lightweight CMS station-building system. YCCMS has a command execution vulnerability that can be exploited by attackers to execute code to gain control of the server...
Arbitrary file deletion vulnerability in YCCms (CNVD-2020-26973)
YCCMS is a PHP version of a lightweight website building system. YCCms has an arbitrary file deletion vulnerability, which can be exploited by attackers to delete arbitrary files...
File Upload Vulnerability in YCCMS
YCCMS is a PHP version of a lightweight website building system. YCCMS has a file upload vulnerability that can be exploited by attackers to gain control of the server...
SQL Injection Vulnerability in YCCMS
YCCMS is a PHP version of a lightweight website building system. YCCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
YCCMS suffers from SQL injection vulnerability (CNVD-2020-24720)
YCCMS is a PHP version of a lightweight website building system. YCCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
Arbitrary File Deletion Vulnerability in YCCMS controller directory Pi***.cl***.php
YCCMS is a PHP version of a lightweight CMS builder. YCCMS 3.4 version controller directory Pi.class.php arbitrary file deletion vulnerability, an attacker can use the vulnerability to delete arbitrary files...
File Upload Vulnerability in YCCMS
YCCMS is a PHP version of a lightweight CMS builder. YCCMS has a file upload vulnerability, which can be exploited by attackers to gain control of a web server...
YCCMS suffers from a file upload vulnerability (CNVD-2020-26512)
YCCMS is a PHP version of a lightweight CMS builder. YCCMS has a file upload vulnerability, which can be exploited by attackers to gain control of a web server...
SQL Injection Vulnerability in YCCMS v3.3
YCCMS is a PHP version of a lightweight CMS builder. YCCMS v3.3 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
File Upload Vulnerability in YCCMS v3.3 System
YCCMS is a version of PHP5 + MYSQL as the technical basis for the development of lightweight CMS station-building system. YCCMS v3.3 system has a file upload vulnerability that can be exploited by attackers to upload arbitrary files and gain control of the web server...
Unauthorized Access Vulnerability in YCCMS v3.3 System
YCCMS is a version of PHP5 + MYSQL as the technical basis for the development of lightweight CMS station-building system. YCCMS v3.3 system has an unauthorized access vulnerability, which can be exploited by attackers to directly access the background without logging in and perform any operation ...
Arbitrary Password Reset Vulnerability in YCCMS V3.3
YCCMS is a version of PHP5 + MYSQL as the technical basis for the development of lightweight CMS station-building system. YCCMS V3.3 has an arbitrary password reset vulnerability. The vulnerability is due to the background change the administrator user password failed to verify the original...
Code Execution Vulnerability in YCCMS
YCCMS is a version of PHP5 + MYSQL as the technical basis for the development of lightweight CMS station-building system. A code execution vulnerability exists in YCCMS v3.3. The vulnerability stems from the failure to strictly filter the type of uploaded images, which can be exploited by attacke...