YzmCMS has an arbitrary file download vulnerability

YzmCMS is a lightweight open source content management system based on YZMPHP. YzmCMS has an arbitrary file download vulnerability that can only be exploited by attacks to obtain sensitive information...

Logic Flaw Vulnerability in YZMCMS Content Management System

YZMCMS content management system is an all-in-one website building system. A logic flaw vulnerability exists in the YZMCMS Content Management System, which can be exploited by an attacker to modify a user's password...

Information leakage vulnerability in YzmCMS

YzmCMS is a lightweight open source content management system based on PHP Mysql architecture, YzmCMS can run on Linux, Windows, MacOSX, Solaris and other platforms. YzmCMS information leakage vulnerability , attackers can use the vulnerability to obtain sensitive user information...

SSRF Vulnerability in YzmCMS v5.8

YzmCMS is a lightweight open source content management system based on PHP+Mysql architecture, YzmCMS can run on Linux, Windows, MacOSX, Solaris and other platforms. YzmCMS v5.8 suffers from an SSRF vulnerability. An attacker can exploit the vulnerability to probe intranet information and obtain...

XSS Vulnerability in YzmCMS

YzmCMS is a lightweight open source content management system based on PHP+Mysql architecture, YzmCMS can run on Linux, Windows, MacOSX, Solaris and other platforms. YzmCMS has an XSS vulnerability. Attackers can use the vulnerability to obtain sensitive information such as user cookies...

YzmCMS Cross-Site Scripting Vulnerability (CNVD-2020-66575)

YzmCMS is a lightweight open source content management system based on PHP+Mysql architecture developed by Yuan Zhimeng alone. A cross-site scripting vulnerability exists in the member submission feature in YzmCMS 5.5. No detailed vulnerability details are available at this time...

CVE-2020-22394

In YzmCMS v5.5 the member contribution function in the editor contains a cross-site scripting XSS vulnerability...

CVE-2020-22394

In YzmCMS v5.5 the member contribution function in the editor contains a cross-site scripting XSS vulnerability...

Cross site scripting

In YzmCMS v5.5 the member contribution function in the editor contains a cross-site scripting XSS vulnerability...

CVE-2020-22394

In YzmCMS v5.5 the member contribution function in the editor contains a cross-site scripting XSS vulnerability...

CVE-2020-22394

CVE-2020-22394 affects YzmCMS v5.5, where the member contribution function in the editor is susceptible to cross-site scripting (XSS). The connected sources confirm an XSS vulnerability in the editor’s member submission feature, with no detailed exploit vector or affected versions beyond v5.5 spe...

CVE-2020-22394: Improper Neutralization of Input During Web Page Generation

In YzmCMS v5.5 the member contribution function in the editor contains a cross-site scripting XSS vulnerability...

PT-2020-15460

Name of the Vulnerable Software and Affected Versions YzmCMS version 5.5 Description The member contribution function in the editor of YzmCMS contains a cross-site scripting XSS issue. This allows for potential malicious script injection and execution. No information is provided about the estimat...

YzmCMS 跨站脚本漏洞

YzmCMS is a lightweight open source content management system based on PHP+Mysql architecture developed by Yuan Zhimeng alone. A cross-site scripting vulnerability exists in the member submission feature in YzmCMS 5.5. No detailed vulnerability details are available at this time...

SQL Injection Vulnerability in YzmCMS

YzmCMS is an open source CMS developed by Chinese programmer Yuan Zhimeng. YzmCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Stored Cross-Site Scripting Vulnerability in YzmCMS

YzmCMS is a lightweight open source content management system based on PHP+Mysql architecture, YzmCMS can run on Linux, Windows, MacOSX, Solaris and other platforms. YzmCMS has a stored cross-site scripting vulnerability. An attacker can exploit the vulnerability to obtain an administrator cookie...

YzmCMS 'url' Cross-Site Scripting Vulnerability

YzmCMS is a lightweight open source content management system based on PHP + Mysql architecture,YzmCMS can run on Linux, Windows, MacOSX, Solaris and other platforms. YzmCMS 'url' cross-site scripting vulnerability. The vulnerability is due to the application/link/controller/link.class.php file...

YzmCMS 5.5 Cross Site Scripting

Exploit Title: YzmCMS 5.5 - 'url' Persistent Cross-Site Scripting Google Dork: N/A Date: 2020-03-10 Exploit Author: En Vendor Homepage: https://github.com/yzmcms/yzmcms Software Link: https://github.com/yzmcms/yzmcms Version: V5.5 Category: Web Application Patched Version: unpatched Tested on:...

YzmCMS 5.5 - url Persistent Cross-Site Scripting

YzmCMS 5.5 - url Persistent Cross-Site Scripting Exploit Title: YzmCMS 5.5 - 'url' Persistent Cross-Site Scripting Google Dork: N/A Date: 2020-03-10 Exploit Author: En Vendor Homepage: https://github.com/yzmcms/yzmcms Software Link: https://github.com/yzmcms/yzmcms Version: V5.5 Category: Web...

YzmCMS 5.5 - (url) Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: YzmCMS 5.5 - 'url' Persistent Cross-Site Scripting Exploit Author: En Vendor Homepage: https://github.com/yzmcms/yzmcms Software Link: https://github.com/yzmcms/yzmcms Version: V5.5 Category: Web Application Patched Version:...