415 matches found
CVE-2020-19951
A cross-site request forgery CSRF in /controller/pay.class.php of YzmCMS v5.5 allows attackers to access sensitive components of the application...
CVE-2020-19950
A cross-site scripting XSS vulnerability in the /banner/add.html component of YzmCMS v5.3 allows attackers to execute arbitrary web scripts or HTML...
CVE-2020-19951
A cross-site request forgery CSRF in /controller/pay.class.php of YzmCMS v5.5 allows attackers to access sensitive components of the application...
CVE-2020-19949
A cross-site scripting XSS vulnerability in the /link/add.html component of YzmCMS v5.3 allows attackers to execute arbitrary web scripts or HTML...
Cross site scripting
A cross-site scripting XSS vulnerability in the /banner/add.html component of YzmCMS v5.3 allows attackers to execute arbitrary web scripts or HTML...
Cross site request forgery (csrf)
A cross-site request forgery CSRF in /controller/pay.class.php of YzmCMS v5.5 allows attackers to access sensitive components of the application...
Cross site scripting
A cross-site scripting XSS vulnerability in the /link/add.html component of YzmCMS v5.3 allows attackers to execute arbitrary web scripts or HTML...
CVE-2020-19951
A cross-site request forgery CSRF in /controller/pay.class.php of YzmCMS v5.5 allows attackers to access sensitive components of the application...
CVE-2020-19951
The CVE-2020-19951 entry concerns a CSRF vulnerability in YzmCMS v5.5, specifically in /controller/pay.class.php. The issue enables an attacker to access sensitive components of the application due to cross-site request forgery. Connected sources consistently reference the same vulnerability in Y...
CVE-2020-19950
A cross-site scripting XSS vulnerability in the /banner/add.html component of YzmCMS v5.3 allows attackers to execute arbitrary web scripts or HTML...
CVE-2020-19950
CVE-2020-19950 applies to YzmCMS v5.3, specifically the vulnerable /banner/add.html component. The connected documents confirm a cross-site scripting (XSS) vulnerability that allows an attacker to execute arbitrary web scripts or HTML in the context of the affected user. The available sources do ...
CVE-2020-19949
A cross-site scripting XSS vulnerability in the /link/add.html component of YzmCMS v5.3 allows attackers to execute arbitrary web scripts or HTML...
CVE-2020-19949
YzmCMS v5.3 contains a cross-site scripting (XSS) vulnerability in the /link/add.html component. The issue allows attackers to execute arbitrary web scripts or HTML. The CVE entry is supported by multiple sources (NVD, Red Hat, CNVD, OSV, CNVD) that describe the same flaw. The provided connected ...
Yzmcms 跨站脚本漏洞
YzmCMS is a lightweight open source content management system based on PHP Mysql architecture developed solely by Yuan Zhimeng. cross-site scripting vulnerability exists in the /link/add.html component of YzmCMS version 5.3. An attacker can use this vulnerability to execute arbitrary Web scripts ...
YzmCMS 跨站脚本漏洞
YzmCMS is a lightweight open source content management system based on PHP Mysql architecture developed solely by Yuan Zhimeng. cross-site scripting vulnerability exists in the /banner/add.html component of YzmCMS version 5.3. An attacker can exploit this vulnerability to execute arbitrary Web...
YzmCMS v5.5/controller/pay.class.php组件 跨站请求伪造漏洞
YzmCMS is a lightweight open source content management system based on PHP Mysql architecture developed solely by Yuan Zhimeng. A cross-site request forgery vulnerability exists in /controller/pay.class.php in YzmCMS version 5.5. An attacker can use this vulnerability to access sensitive componen...
YzmCMS server-side request forgery vulnerability
YzmCMS is a lightweight open source content management system based on PHP Mysql architecture developed solely by Yuan Zhimeng. a server-side request forgery vulnerability exists in the grabimage function in YzmCMS version 5.5. No detailed vulnerability details are provided...
CVE-2020-20341
YzmCMS v5.5 contains a server-side request forgery SSRF in the grabimage function...