EUVD-2019-19027

Malware in sbrugna...

CVE-2020-19118

Cross Site Scripting XSS vulnerabiity in YzmCMS 5.2 via the sitecode parameter in admin/index/init.html...

Cross site scripting

Cross Site Scripting XSS vulnerabiity in YzmCMS 5.2 via the sitecode parameter in admin/index/init.html...

CVE-2020-19118

Cross Site Scripting XSS vulnerabiity in YzmCMS 5.2 via the sitecode parameter in admin/index/init.html...

CVE-2020-19118

CVE-2020-19118 affects YzmCMS 5.2, where the site_code parameter in admin/index/init.html enables a Cross Site Scripting (XSS) vulnerability. The connected documents consistently describe an XSS vulnerability through this parameter, with exploit details not provided beyond generic JavaScript inje...

Cross site scripting

Stored XSS exists in YzmCMS 5.2 via the admin/category/edit.html "catname" parameter...

Cross site scripting

Stored XSS exists in YzmCMS 5.2 via the admin/systemmanage/userconfigedit.html "value" parameter,...

CVE-2019-9660

Stored XSS exists in YzmCMS 5.2 via the admin/category/edit.html "catname" parameter...

CVE-2019-9661

Stored XSS exists in YzmCMS 5.2 via the admin/systemmanage/userconfigedit.html "value" parameter,...

CVE-2019-9660

Stored XSS exists in YzmCMS 5.2 via the admin/category/edit.html "catname" parameter...

CVE-2019-9661

Stored XSS exists in YzmCMS 5.2 via the admin/systemmanage/userconfigedit.html "value" parameter,...

CVE-2019-9661

CVE-2019-9661 describes a stored cross-site scripting (XSS) vulnerability in the YzmCMS 5.2 content management system. The flaw is reachable through the admin/system_manage/user_config_edit.html page via the value parameter, allowing injection of script/HTML. The connected records confirm the vul...

CVE-2019-9660

CVE-2019-9660 is a stored XSS vulnerability in YzmCMS 5.2 exploitable via the admin/category/edit.html page using the catname parameter. Multiple sources (NVD/NVD CVE entry, CNVD, CVE lists) describe the issue; CVSSv3 base score 4.8 (medium) with network attack vector, low confidentiality/integri...

Design/Logic Flaw

An issue was discovered in YzmCMS 5.2. XSS exists via the admin/content/search.html searinfo parameter...

CVE-2018-19849

An issue was discovered in YzmCMS 5.2. XSS exists via the admin/content/search.html searinfo parameter...