Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: yunucms'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2020-18446 3.5 Cross Site Scripting (XSS) vulnerability exists in YUNUCMS 1.1.9 via the param parameter in the insertContent function in ContentModel.php. 2021-08-13 18:20:00
CVE-2020-18445 4.3 Cross Site Scripting (XSS) vulnerability exists in YUNUCMS 1.1.9 via the upurl function in Page.php. 2021-08-13 18:19:00
CVE-2019-5311 4.3 An issue was discovered in YUNUCMS V1.1.8. app/index/controller/Show.php has an XSS vulnerability via the index.php/index/show/index cw parameter. 2019-01-10 17:01:00
CVE-2019-5310 4.3 YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php because crafted data can be written to the sys.php file, as demonstrated by site_title in an admin/system/basic POST request. 2019-01-10 17:00:00
CVE-2018-19180 7.5 statics/app/index/controller/Install.php in YUNUCMS 1.1.5 (if install.lock is not present) allows remote attackers to execute arbitrary PHP code by placing this code in the index.php?s=index/install/setup2 DB_PREFIX field, which is written to databas 2018-12-12 15:18:00
CVE-2018-19181 6.4 statics/ueditor/php/vendor/Local.class.php in YUNUCMS 1.1.5 allows arbitrary file deletion via the statics/ueditor/php/controller.php?action=remove key parameter, as demonstrated by using directory traversal to delete the install.lock file. 2018-12-12 14:56:00
CVE-2018-18720 3.5 An XSS issue was discovered in index.php/admin/system/basic in YUNUCMS 1.1.5. 2018-12-04 20:54:00
CVE-2018-18721 3.5 An XSS issue was discovered in admin/link/editlink?id=5 in YUNUCMS 1.1.5. 2018-12-04 20:51:00
CVE-2018-18723 3.5 An XSS issue was discovered in index.php/admin/area/editarea/id/110000 in YUNUCMS 1.1.5. 2018-12-04 20:50:00
CVE-2018-18722 3.5 An XSS issue was discovered in admin/content/editcontent?id=29&gopage=1 in YUNUCMS 1.1.5. 2018-12-04 20:50:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/2
Zapisa po stranici: