524 matches found
CVE-2023-52274
member/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header...
CVE-2023-52274: Improper Neutralization of Input During Web Page Generation
member/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header...
YzmCMS 安全漏洞
Yzmcms is an open source CMS Content Management System. YzmCMS version 6.5 to 7.0 cross-site scripting vulnerability, the vulnerability stems from the member/index/register.html page of the Referer HTTP header of the user-supplied data lack of effective filtering and escaping, an attacker can...
CVE-2023-52274
member/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header...
CVE-2023-52274
member/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header...
CVE-2023-52274
CVE-2023-52274 affects YzmCMS versions 6.5–7.0, where a cross-site scripting (XSS) vulnerability exists in member/index/register.html via the Referer HTTP header. The CNVD/NVD/OSV/CVE entries describe the root cause as insufficient filtering/escaping of user-supplied data in the Referer header, e...
PT-2024-14503
Name of the Vulnerable Software and Affected Versions YzmCMS versions 6.5 through 7.0 Description The issue allows for XSS via the Referer HTTP header in the member/index/register.html page. Recommendations For YzmCMS versions 6.5 through 7.0, consider restricting access to the...
Yzmcms Cross-Site Request Forgery Vulnerability (CNVD-2023-64113)
Yzmcms is Yzmcms a set of open source CMS Content Management System. yzmcms 5.6 version of the cross-site request forgery vulnerability , the vulnerability stems from the program does not adequately verify whether the request comes from a trusted user , an attacker can use this vulnerability to...
CVE-2020-23595
Cross Site Request Forgery CSRF vulnerability in yzmcms version 5.6, allows remote attackers to escalate privileges and gain sensitive information sitemodel/add.html endpoint...
CVE-2020-23595
Cross Site Request Forgery CSRF vulnerability in yzmcms version 5.6, allows remote attackers to escalate privileges and gain sensitive information sitemodel/add.html endpoint...
Cross site request forgery (csrf)
Cross Site Request Forgery CSRF vulnerability in yzmcms version 5.6, allows remote attackers to escalate privileges and gain sensitive information sitemodel/add.html endpoint...
CVE-2020-23595
Cross Site Request Forgery CSRF vulnerability in yzmcms version 5.6, allows remote attackers to escalate privileges and gain sensitive information sitemodel/add.html endpoint...
CVE-2020-23595
Summary: CVE-2020-23595 is a CSRF vulnerability in yzmcms 5.6 that affects the sitemodel/add.html endpoint, enabling remote attackers to escalate privileges and access sensitive information. The underlying issue is insufficient CSRF protection, allowing unauthorized requests to that endpoint. The...
Yzmcms 跨站请求伪造漏洞
Yzmcms is Yzmcms a set of open source CMS Content Management System. yzmcms 5.6 version of the cross-site request forgery vulnerability , the vulnerability stems from the program does not adequately verify whether the request comes from a trusted user , an attacker can use this vulnerability to...
PT-2023-11651 · Yzmcms · Yzmcms
Name of the Vulnerable Software and Affected Versions: yzmcms version 5.6 Description: The issue allows remote attackers to escalate privileges and gain sensitive information. This is achieved through a Cross Site Request Forgery CSRF vulnerability, specifically at the "sitemodel/add.html"...
CVE-2020-23595: Cross-Site Request Forgery (CSRF)
Cross Site Request Forgery CSRF vulnerability in yzmcms version 5.6, allows remote attackers to escalate privileges and gain sensitive information sitemodel/add.html endpoint...
CVE-2020-23595
Cross Site Request Forgery CSRF vulnerability in yzmcms version 5.6, allows remote attackers to escalate privileges and gain sensitive information sitemodel/add.html endpoint...
Yzmcms 跨站请求伪造漏洞
Yzmcms is an open source CMS Content Management System for Yzmcms individual developers. A security vulnerability exists in Yzmcms version 2.0. Attackers use the vulnerability to execute arbitrary code through the token checking function...
Yzmcms Cross-Site Scripting Vulnerability (CNVD-2023-09601)
Yzmcms is an open source CMS Content Management System for Yzmcms individual developers. A cross-site scripting vulnerability exists in Yzmcms version 6.1. A remote attacker can exploit this vulnerability to steal user cookies via the image cutter function...