Rezultati pretraživanja za 'Proizvođač: yxcms'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2018-13025 | 5.5 | protected/apps/admin/controller/photoController.php in YXcms 1.4.7 allows remote attackers to delete arbitrary files via the index.php?r=admin/photo/delpic picname parameter. | 2019-10-03 00:03:00 | 2018-06-29 17:29:00 |
| CVE-2018-8761 | 5.0 | protected\apps\member\controller\shopcarController.php in Yxcms building system (compatible cell phone) v1.4.7 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. | 2019-10-03 00:03:00 | 2018-03-19 14:29:00 |
| CVE-2018-19404 | 6.5 | In YXcms 1.4.7, protected/apps/appmanage/controller/indexController.php allow remote authenticated Administrators to execute any PHP code by creating a ZIP archive containing a config.php file, hosting the .zip file at an external URL, and visiting i | 2018-12-19 17:50:00 | 2018-11-21 00:29:00 |
| CVE-2018-11003 | 4.3 | An issue was discovered in YXcms 1.4.7. Cross-site request forgery (CSRF) vulnerability in protected/apps/admin/controller/adminController.php allows remote attackers to delete administrator accounts via index.php?r=admin/admin/admindel. | 2018-06-18 16:09:00 | 2018-05-12 04:29:00 |
| CVE-2018-8805 | 4.3 | Yxcms building system (compatible cell phone) v1.4.7 has XSS via the content parameter to protected\apps\default\view\default\extend_guestbook.php or protected\apps\default\view\mobile\extend_guestbook.php in an index.php?r=default/column/index&col=g | 2018-04-13 16:47:00 | 2018-03-20 05:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/1
Zapisa po stranici: