yuba records
7 published records for vendor yuba.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2022-34937No exploit | Yuba u5cms v8.3.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component savepage.php.yuba · u5cms · CWE-352 | High8.8 | — | 0.7% | Aug 2, 2022 |
31Monitor | CVE-2015-1576Proof of concept | Multiple SQL injection vulnerabilities in u5CMS before 3.9.4 allow remote attackers to execute arbitrary SQL commands via the name parameteryuba · u5cms · CWE-89 | High7.5 | — | 2.1% | Feb 11, 2015 |
27Monitor | CVE-2015-1577Proof of concept | Directory traversal vulnerability in u5admin/deletefile.php in u5CMS before 3.9.4 allows remote attackers to write to arbitrary files via a yuba · u5cms · CWE-22 | Medium6.4 | — | 7.2% | Feb 11, 2015 |
25Monitor | CVE-2015-1578Proof of concept | Multiple open redirect vulnerabilities in u5CMS before 3.9.4 allow remote attackers to redirect users to arbitrary web sites and conduct phiyuba · u5cms | Medium5.8 | — | 7.2% | Feb 11, 2015 |
25Monitor | CVE-2022-32444Proof of concept | An issue was discovered in u5cms verion 8.3.5 There is a URL redirection vulnerability that can cause a user's browser to be redirected to ayuba · u5cms · CWE-601 | Medium6.1 | — | 2.4% | Jun 17, 2022 |
24Monitor | CVE-2022-32442No exploit | u5cms version 8.3.5 is vulnerable to Cross Site Scripting (XSS).yuba · u5cms · CWE-79 | Medium6.1 | — | 0.7% | Jun 17, 2022 |
18Monitor | CVE-2015-1575Proof of concept | Multiple cross-site scripting (XSS) vulnerabilities in u5CMS before 3.9.4 allow remote attackers to inject arbitrary web script or HTML via yuba · u5cms · CWE-79 | Medium4.3 | — | 3.2% | Feb 11, 2015 |
- CVE-2022-3493735Monitor
Yuba u5cms v8.3.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component savepage.php.
HighCVSS 8.8No exploitEPSS 0%yuba · u5cmsAug 2, 2022
- CVE-2015-157631Monitor
Multiple SQL injection vulnerabilities in u5CMS before 3.9.4 allow remote attackers to execute arbitrary SQL commands via the name parameter
HighCVSS 7.5Proof of conceptEPSS 2%yuba · u5cmsFeb 11, 2015
- CVE-2015-157727Monitor
Directory traversal vulnerability in u5admin/deletefile.php in u5CMS before 3.9.4 allows remote attackers to write to arbitrary files via a
MediumCVSS 6.4Proof of conceptEPSS 7%yuba · u5cmsFeb 11, 2015
- CVE-2015-157825Monitor
Multiple open redirect vulnerabilities in u5CMS before 3.9.4 allow remote attackers to redirect users to arbitrary web sites and conduct phi
MediumCVSS 5.8Proof of conceptEPSS 7%yuba · u5cmsFeb 11, 2015
- CVE-2022-3244425Monitor
An issue was discovered in u5cms verion 8.3.5 There is a URL redirection vulnerability that can cause a user's browser to be redirected to a
MediumCVSS 6.1Proof of conceptEPSS 2%yuba · u5cmsJun 17, 2022
- CVE-2022-3244224Monitor
u5cms version 8.3.5 is vulnerable to Cross Site Scripting (XSS).
MediumCVSS 6.1No exploitEPSS 0%yuba · u5cmsJun 17, 2022
- CVE-2015-157518Monitor
Multiple cross-site scripting (XSS) vulnerabilities in u5CMS before 3.9.4 allow remote attackers to inject arbitrary web script or HTML via
MediumCVSS 4.3Proof of conceptEPSS 3%yuba · u5cmsFeb 11, 2015