CVE-2022-23889

The CVE-2022-23889 entry concerns YzmCMS v6.3 where the comment function can be operated concurrently, enabling an attacker to generate an unusually large number of comments. The core issue is a race/concurrency condition in the comment handling code, leading to potential resource exhaustion or i...

CVE-2022-23889

The comment function in YzmCMS v6.3 was discovered as being able to be operated concurrently, allowing attackers to create an unusually large number of comments...

CVE-2022-23888

YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgey CSRF via the component /yzmcms/comment/index/init.html...

CVE-2022-23888

YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgey CSRF via the component /yzmcms/comment/index/init.html...

CVE-2022-23888

CVE-2022-23888 concerns YzmCMS v6.3, which is reported to be vulnerable to a Cross-Site Request Forgery (CSRF) via the component at /yzmcms/comment/index/init.html. The connected Red Hat and other sources reiterate the same description. No additional technical details, affected versions beyond v6...

CVE-2022-23888

YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgey CSRF via the component /yzmcms/comment/index/init.html...

CVE-2022-23887

YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily delete user accounts via /admin/adminmanage/delete...

CVE-2022-23887

YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily delete user accounts via /admin/adminmanage/delete...

CVE-2022-23887

CVE-2022-23887: YzmCMS v6.3 is affected by a Cross-Site Request Forgery (CSRF) that lets an attacker delete user accounts via /admin/admin_manage/delete. Root cause is CSRF vulnerability; exploitation details are not provided in the documents. No remediation/fix is specified in the provided data....

CVE-2022-23887

YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily delete user accounts via /admin/adminmanage/delete...

PT-2022-16313

Name of the Vulnerable Software and Affected Versions YzmCMS version 6.3 Description A Cross-Site Request Forgery CSRF issue was discovered in the component /yzmcms/comment/index/init.html. Recommendations For YzmCMS version 6.3, consider implementing proper CSRF protection mechanisms, such as...

CVE-2022-23889: Uncontrolled Recursion

The comment function in YzmCMS v6.3 was discovered as being able to be operated concurrently, allowing attackers to create an unusually large number of comments...

Yzmcms 跨站请求伪造漏洞

Yzmcms is an open source CMS Content Management System for Yzmcms personal developers. YzmCMS v6.3 is vulnerable to cross-site request forgery, which can be exploited by attackers to trigger cross-site request forgery CSRF via the component /yzmcms/comment/index/init.html...

CVE-2022-23888: Cross-Site Request Forgery (CSRF)

YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgey CSRF via the component /yzmcms/comment/index/init.html...

PT-2022-16312

Name of the Vulnerable Software and Affected Versions YzmCMS version 6.3 Description A Cross-Site Request Forgery CSRF issue allows attackers to arbitrarily delete user accounts via the /admin/admin manage/delete API endpoint. This enables unauthorized modifications to user accounts...

CVE-2022-23887: Cross-Site Request Forgery (CSRF)

YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily delete user accounts via /admin/adminmanage/delete...

YzmCMS 安全漏洞

Yzmcms is an open source CMS content management system for Yzmcms individual developers. an uncontrolled recursive vulnerability exists in YzmCMS v6.3, which stems from the fact that the comment function can operate concurrently and an attacker can use this vulnerability to create an unusually...

PT-2022-16314

Name of the Vulnerable Software and Affected Versions YzmCMS version 6.3 Description The issue in YzmCMS allows attackers to create an unusually large number of comments due to the concurrent operation of the comment function. Recommendations For YzmCMS version 6.3, consider disabling the comment...

YzmCMS Cross-Site Scripting Vulnerability (CNVD-2021-90911)

YzmCMS is a lightweight open source content management system based on PHP Mysql architecture developed solely by Yuan Zhimeng. cross-site scripting vulnerability exists in the /banner/add.html component of YzmCMS version 5.3. An attacker can exploit this vulnerability to execute arbitrary Web...

YzmCMS Cross-site Request Forgery Vulnerability (CNVD-2021-90912)

YzmCMS is a lightweight open source content management system based on PHP Mysql architecture developed solely by Yuan Zhimeng. A cross-site request forgery vulnerability exists in /controller/pay.class.php in YzmCMS version 5.5. An attacker can use this vulnerability to access sensitive componen...