523 matches found
YzmCMS 安全漏洞
Yzmcms is an open source CMS Content Management System by the individual developer of Yzmcms. A security vulnerability exists in YzmCMS version 7.1, which stems from the presence of a reflective cross-site scripting vulnerability that allows an attacker to capture a logged-in user's cookie when...
CVE-2024-35110: Improper Neutralization of Input During Web Page Generation
A reflected XSS vulnerability has been found in YzmCMS 7.1. The vulnerability exists in yzmphp/core/class/application.class.php: when logged-in users access a malicious link, their cookies can be captured by an attacker...
CVE-2024-28725
Cross Site Scripting XSS vulnerability in YzmCMS 7.0 allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings...
CVE-2024-28725
A Cross Site Scripting (XSS) vulnerability exists in YzmCMS version 7.0 . The flaw allows attackers to execute arbitrary code by targeting the Ads Management , Carousel Management , and System Settings components. While the vulnerability is classified as XSS, the documentation explicitly states i...
PT-2024-22541 · Yzmcms · Yzmcms
Name of the Vulnerable Software and Affected Versions: YzmCMS version 7.0 Description: The issue allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings. This is a Cross Site Scripting XSS issue. Recommendations: For YzmCMS version 7.0, update to a...
CVE-2024-28725: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in YzmCMS 7.0 allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings...
CVE-2024-28725
Cross Site Scripting XSS vulnerability in YzmCMS 7.0 allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings...
CVE-2024-28725
Cross Site Scripting XSS vulnerability in YzmCMS 7.0 allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings...
CVE-2024-28725
Cross Site Scripting XSS vulnerability in YzmCMS 7.0 allows attackers to run arbitrary code via Ads Management, Carousel Management, and System Settings...
CVE-2024-24291
An issue in the component /member/index/login of yzmcms v7.0 allows attackers to direct users to malicious sites via a crafted URL...
Yzmcms Security Vulnerabilities
Yzmcms is an open source CMS Content Management System for Yzmcms individual developers. A security vulnerability exists in Yzmcms v7.0. An attacker exploited the vulnerability to direct users to a malicious site via a specially crafted URL...
PT-2024-20339 · Yzmcms · Yzmcms
Name of the Vulnerable Software and Affected Versions: yzmcms version 7.0 Description: An issue in the component /member/index/login of yzmcms allows attackers to direct users to malicious sites via a crafted URL. Recommendations: For yzmcms version 7.0, consider restricting access to the...
CVE-2024-24291
An issue in the component /member/index/login of yzmcms v7.0 allows attackers to direct users to malicious sites via a crafted URL...
CVE-2024-24291
An issue in the component /member/index/login of yzmcms v7.0 allows attackers to direct users to malicious sites via a crafted URL...
CVE-2024-24291: URL Redirection to Untrusted Site
An issue in the component /member/index/login of yzmcms v7.0 allows attackers to direct users to malicious sites via a crafted URL...
CVE-2024-24291
CVE-2024-24291 affects yzmcms v7.0, impacting the /member/index/login component. A crafted URL can redirect users to malicious sites. The CVSS v3.1 score is 6.1 (Medium) with user interaction required and no confirmed patch version in the provided sources. Some references note no available fix ye...
YzmCMS Cross-Site Scripting Vulnerability (CNVD-2024-02989)
Yzmcms is an open source CMS Content Management System. YzmCMS version 6.5 to 7.0 cross-site scripting vulnerability, the vulnerability stems from the member/index/register.html page of the Referer HTTP header of the user-supplied data lack of effective filtering and escaping, an attacker can...
CVE-2023-52274
member/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header...
