youdiancms kayıtları
youdiancms üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-384 Session Fixation1
- CWE-918 Server-Side Request Forgery (SSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2022-32301İstismar yok | YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the IdList parameter at /App/Lib/Action/Home/ApiAction.class.pyoudiancms · youdiancms · CWE-89 | Kritik9,8 | — | %1,1 | 15 Haz 2022 |
39İzleyin | CVE-2024-57052İstismar yok | An issue in youdiancms v.9.5.20 and before allows a remote attacker to escalate privileges via the sessionID parameter in the index.php fileyoudiancms · youdiancms · CWE-384 | Kritik9,8 | — | %0,5 | 27 Oca 2025 |
35İzleyin | CVE-2022-32300İstismar yok | YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the MailSendID parameter at /App/Lib/Action/Admin/MailAction.cyoudiancms · youdiancms · CWE-89 | Yüksek8,8 | — | %1,3 | 15 Haz 2022 |
35İzleyin | CVE-2020-18116İstismar yok | A lack of filtering for searched keywords in the search bar of YouDianCMS 8.0 allows attackers to perform SQL injection.youdiancms · youdiancms · CWE-89 | Yüksek8,8 | — | %1,1 | 27 Ağu 2021 |
35İzleyin | CVE-2022-32299İstismar yok | YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the id parameter at /App/Lib/Action/Admin/SiteAction.class.phpyoudiancms · youdiancms · CWE-89 | Yüksek8,8 | — | %1,1 | 15 Haz 2022 |
27İzleyin | CVE-2024-7328İstismar yok | YouDianCMS information disclosureyoudiancms · youdiancms · CWE-200 | Orta6,9 | — | %0,7 | 31 Tem 2024 |
21İzleyin | CVE-2024-7329İstismar yok | YouDianCMS image_upload.php unrestricted uploadyoudiancms · youdiancms · CWE-434 | Orta5,3 | — | %0,7 | 31 Tem 2024 |
21İzleyin | CVE-2024-7330İstismar yok | YouDianCMS ydLib.php curl_exec server-side request forgeryyoudiancms · youdiancms · CWE-918 | Orta5,3 | — | %0,5 | 31 Tem 2024 |
21İzleyin | CVE-2025-3531İstismar yok | YouDianCMS index.html cross site scriptingyoudiancms · youdiancms · CWE-79 | Orta5,3 | — | %0,5 | 13 Nis 2025 |
21İzleyin | CVE-2025-3532İstismar yok | YouDianCMS index.html.Attackers cross site scriptingyoudiancms · youdiancms · CWE-79 | Orta5,3 | — | %0,5 | 13 Nis 2025 |
21İzleyin | CVE-2025-3533İstismar yok | YouDianCMS index.html.Attackers cross site scriptingyoudiancms · youdiancms · CWE-79 | Orta5,3 | — | %0,5 | 13 Nis 2025 |
18İzleyin | CVE-2024-3117İstismar yok | YouDianCMS ChannelAction.class.php unrestricted uploadyoudiancms · youdiancms · CWE-434 | Orta4,7 | — | %0,6 | 30 Mar 2024 |
- CVE-2022-3230139İzleyin
YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the IdList parameter at /App/Lib/Action/Home/ApiAction.class.p
KritikCVSS 9,8İstismar yokEPSS %1youdiancms · youdiancms15 Haz 2022
- CVE-2024-5705239İzleyin
An issue in youdiancms v.9.5.20 and before allows a remote attacker to escalate privileges via the sessionID parameter in the index.php file
KritikCVSS 9,8İstismar yokEPSS %1youdiancms · youdiancms27 Oca 2025
- CVE-2022-3230035İzleyin
YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the MailSendID parameter at /App/Lib/Action/Admin/MailAction.c
YüksekCVSS 8,8İstismar yokEPSS %1youdiancms · youdiancms15 Haz 2022
- CVE-2020-1811635İzleyin
A lack of filtering for searched keywords in the search bar of YouDianCMS 8.0 allows attackers to perform SQL injection.
YüksekCVSS 8,8İstismar yokEPSS %1youdiancms · youdiancms27 Ağu 2021
- CVE-2022-3229935İzleyin
YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the id parameter at /App/Lib/Action/Admin/SiteAction.class.php
YüksekCVSS 8,8İstismar yokEPSS %1youdiancms · youdiancms15 Haz 2022
- CVE-2024-732827İzleyin
YouDianCMS information disclosure
OrtaCVSS 6,9İstismar yokEPSS %1youdiancms · youdiancms31 Tem 2024
- CVE-2024-732921İzleyin
YouDianCMS image_upload.php unrestricted upload
OrtaCVSS 5,3İstismar yokEPSS %1youdiancms · youdiancms31 Tem 2024
- CVE-2024-733021İzleyin
YouDianCMS ydLib.php curl_exec server-side request forgery
OrtaCVSS 5,3İstismar yokEPSS %0youdiancms · youdiancms31 Tem 2024
- CVE-2025-353121İzleyin
YouDianCMS index.html cross site scripting
OrtaCVSS 5,3İstismar yokEPSS %0youdiancms · youdiancms13 Nis 2025
- CVE-2025-353221İzleyin
YouDianCMS index.html.Attackers cross site scripting
OrtaCVSS 5,3İstismar yokEPSS %0youdiancms · youdiancms13 Nis 2025
- CVE-2025-353321İzleyin
YouDianCMS index.html.Attackers cross site scripting
OrtaCVSS 5,3İstismar yokEPSS %0youdiancms · youdiancms13 Nis 2025
- CVE-2024-311718İzleyin
YouDianCMS ChannelAction.class.php unrestricted upload
OrtaCVSS 4,7İstismar yokEPSS %1youdiancms · youdiancms30 Mar 2024