Yzmcms access control error vulnerability

Yzmcms is an open source CMS Content Management System for Yzmcms personal developers. v6.3 of Yzmcms contains an access control error vulnerability that stems from the application's lack of user login status authentication before accessing a personal homepage. An attacker could use this...

Yzmcms Cross-site Request Forgery Vulnerability (CNVD-2022-20584)

Yzmcms is an open source CMS Content Management System for Yzmcms personal developers. YzmCMS v6.3 is vulnerable to cross-site request forgery, which can be exploited by attackers to trigger cross-site request forgery CSRF via the component /yzmcms/comment/index/init.html...

CVE-2022-23383

YzmCMS v6.3 is affected by broken access control. Without login, unauthorized access to the user's personal home page can be realized. It is necessary to judge the user's login status before accessing the personal home page, but the vulnerability can access other users' home pages through the non...

Improper access control

YzmCMS v6.3 is affected by broken access control. Without login, unauthorized access to the user's personal home page can be realized. It is necessary to judge the user's login status before accessing the personal home page, but the vulnerability can access other users' home pages through the non...

Yzmcms 授权问题漏洞

Yzmcms is an open source CMS Content Management System for Yzmcms personal developers. v6.3 of Yzmcms contains an access control error vulnerability that stems from the application's lack of user login status authentication before accessing a personal homepage. An attacker could use this...

CVE-2022-23383

YzmCMS v6.3 is affected by broken access control. Without login, unauthorized access to the user's personal home page can be realized. It is necessary to judge the user's login status before accessing the personal home page, but the vulnerability can access other users' home pages through the non...

CVE-2022-23383

YzmCMS v6.3 is affected by broken access control. Without login, unauthorized access to the user's personal home page can be realized. It is necessary to judge the user's login status before accessing the personal home page, but the vulnerability can access other users' home pages through the non...

CVE-2022-23383

Affected software : YzmCMS v6.3. Vulnerability : broken access control allows unauthorized access to other users’ personal home pages without login. Root cause : the application fails to verify login status before accessing a personal homepage, enabling non-authenticated access to other users’ ho...

YzmCMS Cross-site Request Forgery Vulnerability (CNVD-2022-12752)

YzmCMS is an open source CMS Content Management System.A cross-site request spoofing vulnerability exists in YzmCMS, which stems from insufficient validation in admin.add that the request is coming from a trusted user. An attacker could use this vulnerability to spoof malicious requests to trick...

CVE-2022-23384

YzmCMS v6.3 is affected by Cross Site Request Forgery CSRF in /admin.add...

CVE-2022-23384

YzmCMS v6.3 is affected by Cross Site Request Forgery CSRF in /admin.add...

Cross site request forgery (csrf)

YzmCMS v6.3 is affected by Cross Site Request Forgery CSRF in /admin.add...

CVE-2022-23384

YzmCMS v6.3 is affected by Cross Site Request Forgery CSRF in /admin.add...

CVE-2022-23384

YzmCMS v6.3 is affected by a Cross Site Request Forgery (CSRF) vulnerability in /admin.add. The CVE entry (CVE-2022-23384) is described across multiple sources as facilitating CSRF, enabling an attacker to spoof requests from victims and potentially trigger sensitive actions. The NVD metrics show...

CVE-2022-23384

YzmCMS v6.3 is affected by Cross Site Request Forgery CSRF in /admin.add...

YzmCMS 跨站请求伪造漏洞

YzmCMS is an open source CMS Content Management System.A cross-site request spoofing vulnerability exists in YzmCMS, which stems from insufficient validation in admin.add that the request is coming from a trusted user. An attacker could use this vulnerability to spoof malicious requests to trick...

CVE-2022-23889

The comment function in YzmCMS v6.3 was discovered as being able to be operated concurrently, allowing attackers to create an unusually large number of comments...

CVE-2022-23888

YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgey CSRF via the component /yzmcms/comment/index/init.html...

CVE-2022-23889

The comment function in YzmCMS v6.3 was discovered as being able to be operated concurrently, allowing attackers to create an unusually large number of comments...

CVE-2022-23888

YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgey CSRF via the component /yzmcms/comment/index/init.html...