CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

protected/apps/admin/controller/photoController.php in YXcms 1.4.7 allows remote attackers to delete arbitrary files via the index.php?r=admin/photo/delpic picname parameter...

5.5CVSS7.2AI score0.00848EPSS

Exploits0References1

CNVD•added 2017/01/06 12:0 a.m.•3 views

Cross-site scripting vulnerability in yxcms Referer parameter

YXcms is a website management system based on PHP+MySql with a lightweight MVC design model. A cross-site scripting vulnerability exists in the Referer parameter on the yxcms\protected\apps\member\controller\indexController.php page in yxcms V1.4. Because the program does not filter the...

6.2AI score

Exploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by