EUVD-2024-16440

Malicious code in bioql PyPI...

CVE-2024-0648

A vulnerability has been found in Yunyou CMS up to 2.2.6 and classified as critical. This vulnerability affects unknown code of the file /app/index/controller/Common.php. The manipulation of the argument templateFile leads to unrestricted upload. The attack can be initiated remotely. The exploit...

CVE-2024-0648

A vulnerability has been found in Yunyou CMS up to 2.2.6 and classified as critical. This vulnerability affects unknown code of the file /app/index/controller/Common.php. The manipulation of the argument templateFile leads to unrestricted upload. The attack can be initiated remotely. The exploit...

CVE-2024-0648

A vulnerability has been found in Yunyou CMS up to 2.2.6 and classified as critical. This vulnerability affects unknown code of the file /app/index/controller/Common.php. The manipulation of the argument templateFile leads to unrestricted upload. The attack can be initiated remotely. The exploit...

Out-of-bounds

A vulnerability has been found in Yunyou CMS up to 2.2.6 and classified as critical. This vulnerability affects unknown code of the file /app/index/controller/Common.php. The manipulation of the argument templateFile leads to unrestricted upload. The attack can be initiated remotely. The exploit...

CVE-2024-0648 Yunyou CMS Common.php unrestricted upload

A vulnerability has been found in Yunyou CMS up to 2.2.6 and classified as critical. This vulnerability affects unknown code of the file /app/index/controller/Common.php. The manipulation of the argument templateFile leads to unrestricted upload. The attack can be initiated remotely. The exploit...

CVE-2024-0648

CVE-2024-0648 affects Yunyou CMS up to 2.2.6. The vulnerability is in /app/index/controller/Common.php where manipulating the templateFile argument leads to unrestricted file upload. It is exploitable remotely; public exploit disclosed. No patch/version fix details are provided in the connected d...

PT-2024-15715 · Unknown · Yunyou Cms

Name of the Vulnerable Software and Affected Versions: Yunyou CMS versions up to 2.2.6 Description: A critical vulnerability has been found in Yunyou CMS, affecting unknown code of the file /app/index/controller/Common.php. The manipulation of the templateFile argument leads to unrestricted uploa...

Zhenjiang City Yunyou Network Technology Co., Ltd. Yunyou CMS v2.0.8 exists SQL injection vulnerability

CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. Zhenjiang City Yunyou Network Technology Co., Ltd. Yunyou CMS v2.0.8 SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive...

Zhenjiang Yunyou Network Technology Co., Ltd. Yunyou CMS has file upload vulnerability

CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. Zhenjiang City, Yun You Network Technology Co., Ltd. Yun You CMS file upload vulnerability, attackers can use the vulnerability to obtain server control privileges...

File Upload Vulnerability in Yunyou CMS of Zhenjiang Yunyou Network Technology Co. Ltd (CNVD-2020-41769)

CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. Zhenjiang City, Yun You Network Technology Co., Ltd. Yun You CMS file upload vulnerability, attackers can use the vulnerability to obtain server control privileges...

Backup File Download Vulnerability in Yunyou CMS

CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. CloudYou CMS has a backup file download vulnerability that can be exploited by attackers to download backup files and obtain sensitive information...

YUNUCMS cross-site scripting vulnerability (CNVD-2019-00565)

YUNUCMS is China Yunyou YUNU network technology company of a set of open source enterprise station building content management system CMS. YUNUCMS1.1.8 version of the app/admin/controller/System.php file there is a cross-site scripting vulnerability , a remote attacker can write to the sys.php fi...

Code Execution Vulnerabilities in the Backend of Yunyou CMS

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. A code execution vulnerability exists in the background of YUNUCMS, which can be exploited by attackers to gain control of the web serve...

Multiple Vulnerabilities in Yunyou CMS Enterprise Website Management System

Yunyou CMS enterprise website management system is a professional marketing enterprise building system based on PHP + MYSQL as the core development. A file upload and reflective cross-site scripting vulnerability exists in the CloudUnion CMS enterprise website management system. The vulnerability...