11 matches found
CVE-2025-56304
Cross-site scripting XSS vulnerability in YzmCMS thru 7.3 via the referer header in the register page...
CVE-2024-7162
A vulnerability, which was classified as problematic, has been found in SeaCMS 12.9/13.0. Affected by this issue is some unknown functionality of the file js/player/dmplayer/admin/post.php?act=setting. The manipulation of the argument yzm leads to cross site scripting. The attack may be launched...
CVE-2024-7162
A vulnerability, which was classified as problematic, has been found in SeaCMS 12.9/13.0. Affected by this issue is some unknown functionality of the file js/player/dmplayer/admin/post.php?act=setting. The manipulation of the argument yzm leads to cross site scripting. The attack may be launched...
CVE-2024-7162: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, has been found in SeaCMS 12.9/13.0. Affected by this issue is some unknown functionality of the file js/player/dmplayer/admin/post.php?act=setting. The manipulation of the argument yzm leads to cross site scripting. The attack may be launched...
SeaCMS 跨站脚本漏洞
SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A cross-site scripting vulnerability exists in SeaCMS version 12.9, which stems from the manipulation of the parameter yzm in the file...
PT-2024-38124 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: SeaCMS versions 12.9 through 13.0 Description: A problematic issue has been found in some unknown functionality of the file "js/player/dmplayer/admin/post.php?act=setting". The manipulation of the yzm argument leads to cross site scripting. T...
CVE-2022-23887
YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily delete user accounts via /admin/adminmanage/delete...
YzmCMS 跨站请求伪造漏洞
Yzmcms is an open source CMS Content Management System for Yzmcms individual developers. yzmCMS v6.3 has a cross-site request forgery vulnerability that allows attackers to arbitrarily delete user accounts via /admin/adminmanage/delete. No details of the vulnerability are currently available...
SQL Injection Vulnerability in YzmCMS Backend or***.cl***.php
YzmCMS is a lightweight and open source content management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. A SQL injection vulnerability exists in YzmCMS backend or.cl.php. Attackers can use the vulnerability to obtain sensitive information ...