PT-2021-10420

Name of the Vulnerable Software and Affected Versions: YzmCMS version 5.3 Description: A cross-site scripting XSS issue in the "/link/add.html" component allows attackers to execute arbitrary web scripts or HTML. Recommendations: For YzmCMS version 5.3, update to a version that includes a fix for...

Yzmcms 跨站脚本漏洞

YzmCMS is a lightweight open source content management system based on PHP Mysql architecture developed solely by Yuan Zhimeng. cross-site scripting vulnerability exists in the /link/add.html component of YzmCMS version 5.3. An attacker can use this vulnerability to execute arbitrary Web scripts ...

YzmCMS 跨站脚本漏洞

YzmCMS is a lightweight open source content management system based on PHP Mysql architecture developed solely by Yuan Zhimeng. cross-site scripting vulnerability exists in the /banner/add.html component of YzmCMS version 5.3. An attacker can exploit this vulnerability to execute arbitrary Web...

CVE-2020-19951: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF in /controller/pay.class.php of YzmCMS v5.5 allows attackers to access sensitive components of the application...

YzmCMS v5.5/controller/pay.class.php组件 跨站请求伪造漏洞

YzmCMS is a lightweight open source content management system based on PHP Mysql architecture developed solely by Yuan Zhimeng. A cross-site request forgery vulnerability exists in /controller/pay.class.php in YzmCMS version 5.5. An attacker can use this vulnerability to access sensitive componen...

PT-2021-10422

Name of the Vulnerable Software and Affected Versions: YzmCMS version 5.5 Description: A cross-site request forgery CSRF issue in the /controller/pay.class.php component allows attackers to access sensitive parts of the application. Recommendations: For YzmCMS version 5.5, consider implementing...

YzmCMS server-side request forgery vulnerability

YzmCMS is a lightweight open source content management system based on PHP Mysql architecture developed solely by Yuan Zhimeng. a server-side request forgery vulnerability exists in the grabimage function in YzmCMS version 5.5. No detailed vulnerability details are provided...

CVE-2020-20341

YzmCMS v5.5 contains a server-side request forgery SSRF in the grabimage function...

CVE-2020-20341

YzmCMS v5.5 contains a server-side request forgery SSRF in the grabimage function...

Server side request forgery (ssrf)

YzmCMS v5.5 contains a server-side request forgery SSRF in the grabimage function...

CVE-2020-20341

CVE-2020-20341 affects YzmCMS v5.5 with a server-side request forgery (SSRF) in the grab_image() function. The issue is documented across multiple sources (NVD, Red Hat, CNVD, etc.), describing an SSRF vulnerability in that specific function. The provided references do not include a patched versi...

CVE-2020-20341

YzmCMS v5.5 contains a server-side request forgery SSRF in the grabimage function...

CVE-2020-20341

YzmCMS v5.5 contains a server-side request forgery SSRF in the grabimage function...

CVE-2020-20341: Server-Side Request Forgery (SSRF)

YzmCMS v5.5 contains a server-side request forgery SSRF in the grabimage function...

PT-2021-10478

Name of the Vulnerable Software and Affected Versions: YzmCMS version 5.5 Description: The issue is related to a server-side request forgery SSRF in the grab image function. This allows for potential unauthorized access to internal resources. Recommendations: For YzmCMS version 5.5, as a temporar...

Yzmcms 代码问题漏洞

YzmCMS is a lightweight open source content management system based on PHP Mysql architecture developed solely by Yuan Zhimeng. a server-side request forgery vulnerability exists in the grabimage function in YzmCMS version 5.5. No detailed vulnerability details are provided...

CVE-2020-19118

Cross Site Scripting XSS vulnerabiity in YzmCMS 5.2 via the sitecode parameter in admin/index/init.html...

CVE-2020-19118

Cross Site Scripting XSS vulnerabiity in YzmCMS 5.2 via the sitecode parameter in admin/index/init.html...

Cross site scripting

Cross Site Scripting XSS vulnerabiity in YzmCMS 5.2 via the sitecode parameter in admin/index/init.html...

Yzmcms 跨站脚本漏洞

YzmCMS is a lightweight open source content management system based on PHP Mysql architecture developed by Yuan Zhimeng alone.YzmCMS version 5.2 has a cross-site scripting vulnerability. An attacker can use the sitecode parameter in admin/index/init.html to inject and execute javascript code...