CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

OSV•added 2018/03/06 6:29 p.m.•5 views

CVE-2018-7732

An issue was discovered in YxtCMF 3.1. SQL Injection exists in ShitiController.class.php via the ids array parameter to exam/shiti/delshiti.html...

9.8CVSS5.8AI score0.01135EPSS

Exploits1References1

Prion•added 2018/03/06 6:29 p.m.•11 views

Cross site request forgery (csrf)

An issue was discovered in YxtCMF 3.1. RbacController.class.php has CSRF, as demonstrated by modifying an administrator account via index.php/admin/user/addpost.html...

6.8CVSS8.6AI score0.00494EPSS

Exploits1References1Affected Software1

Cvelist•added 2018/03/06 6:0 p.m.•17 views

CVE-2018-7733

An issue was discovered in YxtCMF 3.1. RbacController.class.php has CSRF, as demonstrated by modifying an administrator account via index.php/admin/user/addpost.html...

8.7AI score0.00494EPSS

Exploits1References1

Cvelist•added 2018/03/06 6:0 p.m.•16 views

CVE-2018-7732

An issue was discovered in YxtCMF 3.1. SQL Injection exists in ShitiController.class.php via the ids array parameter to exam/shiti/delshiti.html...

9.8AI score0.01135EPSS

Exploits1References1

Rows per page