415 matches found
Cross site scripting
Stored XSS exists in YzmCMS 5.2 via the admin/systemmanage/userconfigedit.html "value" parameter,...
CVE-2019-9660
Stored XSS exists in YzmCMS 5.2 via the admin/category/edit.html "catname" parameter...
CVE-2019-9660
Stored XSS exists in YzmCMS 5.2 via the admin/category/edit.html "catname" parameter...
CVE-2019-9661
Stored XSS exists in YzmCMS 5.2 via the admin/systemmanage/userconfigedit.html "value" parameter,...
CVE-2019-9661
CVE-2019-9661 describes a stored cross-site scripting (XSS) vulnerability in the YzmCMS 5.2 content management system. The flaw is reachable through the admin/system_manage/user_config_edit.html page via the value parameter, allowing injection of script/HTML. The connected records confirm the vul...
CVE-2019-9660
CVE-2019-9660 is a stored XSS vulnerability in YzmCMS 5.2 exploitable via the admin/category/edit.html page using the catname parameter. Multiple sources (NVD/NVD CVE entry, CNVD, CVE lists) describe the issue; CVSSv3 base score 4.8 (medium) with network attack vector, low confidentiality/integri...
YzmCMS Cross-Site Scripting Vulnerability (CNVD-2019-07930)
YzmCMS is an open source CMS Content Management System by Yuan Zhimeng programmers in China. A cross-site scripting vulnerability exists in YzmCMS version 5.2. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HTML with the help of the 'configuration value'...
Code injection
An issue was discovered in YzmCMS 5.2.0. It has XSS via the bottom text field to the admin/systemmanage/save.html URI, related to the sitecode parameter...
CVE-2019-9570
An issue was discovered in YzmCMS 5.2.0. It has XSS via the bottom text field to the admin/systemmanage/save.html URI, related to the sitecode parameter...
CVE-2019-9570
An issue was discovered in YzmCMS 5.2.0. It has XSS via the bottom text field to the admin/systemmanage/save.html URI, related to the sitecode parameter...
CVE-2019-9570
CVE-2019-9570 affects YzmCMS 5.2.0. The vulnerability is a reflected/persistent XSS via the bottom text field to the admin/system_manage/save.html URI, related to the site_code parameter. The description notes an XSS condition but does not provide details on the exact payload, affected configurat...
CVE-2019-9570
An issue was discovered in YzmCMS 5.2.0. It has XSS via the bottom text field to the admin/systemmanage/save.html URI, related to the sitecode parameter...
CVE-2018-20015
YzmCMS v5.2 has admin/role/add.html CSRF...
Cross site request forgery (csrf)
YzmCMS v5.2 has admin/role/add.html CSRF...
CVE-2018-20015
YzmCMS 5.2 contains a CSRF vulnerability in admin/role/add.html. The CVE entry notes a CSRF weakness with a CVSSv3 base score of 8.8 (HIGH). Attack vector is NETWORK, with no privileges required, but user interaction is required, and impacts are HIGH for confidentiality, integrity, and availabili...
CVE-2018-20015
YzmCMS v5.2 has admin/role/add.html CSRF...
CVE-2018-19849
An issue was discovered in YzmCMS 5.2. XSS exists via the admin/content/search.html searinfo parameter...
CVE-2018-19849
An issue was discovered in YzmCMS 5.2. XSS exists via the admin/content/search.html searinfo parameter...
Design/Logic Flaw
An issue was discovered in YzmCMS 5.2. XSS exists via the admin/content/search.html searinfo parameter...
CVE-2018-19849
CVE-2018-19849 concerns YzmCMS 5.2 where an XSS vulnerability exists in the admin/content/search.html page via the searinfo parameter. The issue arises from unsanitized input in that parameter, enabling script/HTML injection. Exploitation details are not provided in the connected documents; no pa...