Rezultati pretraživanja za 'Proizvođač: yzmcms'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-20502 | 6.5 | Cross Site Request Forgery found in yzCMS v.2.0 allows a remote attacker to execute arbitrary code via the token check function. | 2024-12-10 19:15:13 | 2023-06-20 15:15:10 |
| CVE-2022-23384 | 6.8 | YzmCMS v6.3 is affected by Cross Site Request Forgery (CSRF) in /admin.add | 2022-02-19 04:20:00 | 2022-02-15 13:15:00 |
| CVE-2018-7479 | 5.0 | YzmCMS 3.6 allows remote attackers to discover the full path via a direct request to application/install/templates/s1.php. | 2022-02-05 02:00:00 | 2018-02-26 03:29:00 |
| CVE-2022-23889 | 5.0 | The comment function in YzmCMS v6.3 was discovered as being able to be operated concurrently, allowing attackers to create an unusually large number of comments. | 2022-02-03 19:59:00 | 2022-01-28 21:15:00 |
| CVE-2022-23888 | 6.8 | YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgey (CSRF) via the component /yzmcms/comment/index/init.html. | 2022-02-02 21:23:00 | 2022-01-28 21:15:00 |
| CVE-2022-23887 | 4.3 | YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily delete user accounts via /admin/admin_manage/delete. | 2022-02-02 21:22:00 | 2022-01-28 21:15:00 |
| CVE-2020-19951 | 6.8 | A cross-site request forgery (CSRF) in /controller/pay.class.php of YzmCMS v5.5 allows attackers to access sensitive components of the application. | 2021-09-29 21:33:00 | 2021-09-23 20:15:00 |
| CVE-2020-19950 | 3.5 | A cross-site scripting (XSS) vulnerability in the /banner/add.html component of YzmCMS v5.3 allows attackers to execute arbitrary web scripts or HTML. | 2021-09-29 20:54:00 | 2021-09-23 20:15:00 |
| CVE-2020-19949 | 3.5 | A cross-site scripting (XSS) vulnerability in the /link/add.html component of YzmCMS v5.3 allows attackers to execute arbitrary web scripts or HTML. | 2021-09-29 20:53:00 | 2021-09-23 20:15:00 |
| CVE-2020-20341 | 5.0 | YzmCMS v5.5 contains a server-side request forgery (SSRF) in the grab_image() function. | 2021-09-10 02:24:00 | 2021-09-01 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/5
Zapisa po stranici: