Arbitrary file download vulnerability in Yiifcms ZipController.php page

Yiifcms is a content management system CMS developed on the yii framework. An arbitrary file download vulnerability exists in the ZipController.php page of Yiifcms version 1.5. An attacker can exploit this vulnerability to download arbitrary files using the "... /" to jump to a directory to...

Stored Cross-site Scripting Vulnerability in yiifcms v1.5

yiifcms is a content management system CMS developed on the yii framework. A stored cross-site scripting vulnerability exists in yiifcms v1.5, due to the system failing to strictly filter nickname and personality signature input. Attackers can use this vulnerability to obtain COOKIE information, ...

SQL Injection Vulnerability in yiifcms Content Management System

yiifcms is a content management system CMS developed on the yii framework. A SQL injection vulnerability exists in the yiifcms content management system due to the system's failure to strictly filter the id and catalogid parameters. An attacker can exploit this vulnerability to obtain sensitive...