Yzmcms Cross-Site Request Forgery Vulnerability (CNVD-2023-64113)

Yzmcms is Yzmcms a set of open source CMS Content Management System. yzmcms 5.6 version of the cross-site request forgery vulnerability , the vulnerability stems from the program does not adequately verify whether the request comes from a trusted user , an attacker can use this vulnerability to...

CVE-2020-23595

Cross Site Request Forgery CSRF vulnerability in yzmcms version 5.6, allows remote attackers to escalate privileges and gain sensitive information sitemodel/add.html endpoint...

CVE-2020-23595

Cross Site Request Forgery CSRF vulnerability in yzmcms version 5.6, allows remote attackers to escalate privileges and gain sensitive information sitemodel/add.html endpoint...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability in yzmcms version 5.6, allows remote attackers to escalate privileges and gain sensitive information sitemodel/add.html endpoint...

Yzmcms 跨站请求伪造漏洞

Yzmcms is Yzmcms a set of open source CMS Content Management System. yzmcms 5.6 version of the cross-site request forgery vulnerability , the vulnerability stems from the program does not adequately verify whether the request comes from a trusted user , an attacker can use this vulnerability to...

PT-2023-11651 · Yzmcms · Yzmcms

Name of the Vulnerable Software and Affected Versions: yzmcms version 5.6 Description: The issue allows remote attackers to escalate privileges and gain sensitive information. This is achieved through a Cross Site Request Forgery CSRF vulnerability, specifically at the "sitemodel/add.html"...

CVE-2020-23595

Cross Site Request Forgery CSRF vulnerability in yzmcms version 5.6, allows remote attackers to escalate privileges and gain sensitive information sitemodel/add.html endpoint...

CVE-2020-23595

Cross Site Request Forgery CSRF vulnerability in yzmcms version 5.6, allows remote attackers to escalate privileges and gain sensitive information sitemodel/add.html endpoint...

CVE-2020-23595

Summary: CVE-2020-23595 is a CSRF vulnerability in yzmcms 5.6 that affects the sitemodel/add.html endpoint, enabling remote attackers to escalate privileges and access sensitive information. The underlying issue is insufficient CSRF protection, allowing unauthorized requests to that endpoint. The...

Yzmcms 跨站请求伪造漏洞

Yzmcms is an open source CMS Content Management System for Yzmcms individual developers. A security vulnerability exists in Yzmcms version 2.0. Attackers use the vulnerability to execute arbitrary code through the token checking function...

Yzmcms Cross-Site Scripting Vulnerability (CNVD-2023-09601)

Yzmcms is an open source CMS Content Management System for Yzmcms individual developers. A cross-site scripting vulnerability exists in Yzmcms version 6.1. A remote attacker can exploit this vulnerability to steal user cookies via the image cutter function...

CVE-2021-36712

Cross Site Scripting XSS vulnerability in yzmcms 6.1 allows attackers to steal user cookies via image clipping function...

CVE-2021-36712

Cross Site Scripting XSS vulnerability in yzmcms 6.1 allows attackers to steal user cookies via image clipping function...

Cross site scripting

Cross Site Scripting XSS vulnerability in yzmcms 6.1 allows attackers to steal user cookies via image clipping function...

CVE-2021-36712

Cross Site Scripting XSS vulnerability in yzmcms 6.1 allows attackers to steal user cookies via image clipping function...

CVE-2021-36712

Cross Site Scripting XSS vulnerability in yzmcms 6.1 allows attackers to steal user cookies via image clipping function...

Yzmcms 跨站脚本漏洞

Yzmcms is an open source CMS Content Management System for Yzmcms individual developers. A cross-site scripting vulnerability exists in Yzmcms version 6.1. A remote attacker can exploit this vulnerability to steal user cookies via the image cutter function...

CVE-2021-36712

Summary: CVE-2021-36712 affectsyzmcms 6.1 with a Cross Site Scripting (XSS) flaw that can allow attackers to steal user cookies via the image clipping function. The entry shows a MEDIUM severity (CVSS v3.1: 5.4), attack vector NETWORK, low attack complexity, privilegeRequired LOW, userInteraction...

YzmCMS Cross-site Request Forgery Vulnerability (CNVD-2022-20583)

Yzmcms is an open source CMS Content Management System for Yzmcms individual developers. yzmCMS v6.3 has a cross-site request forgery vulnerability that allows attackers to arbitrarily delete user accounts via /admin/adminmanage/delete. No details of the vulnerability are currently available...

YzmCMS uncontrolled recursion vulnerability

Yzmcms is an open source CMS content management system for Yzmcms individual developers. an uncontrolled recursive vulnerability exists in YzmCMS v6.3, which stems from the fact that the comment function can operate concurrently and an attacker can use this vulnerability to create an unusually...