yunucms kayıtları
yunucms üreticisine ait 15 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')13
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
15 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2018-19180İstismar yok | statics/app/index/controller/Install.php in YUNUCMS 1.1.5 (if install.lock is not present) allows remote attackers to execute arbitrary PHP yunucms · yunucms · CWE-94 | Kritik9,8 | — | %1,5 | 11 Kas 2018 |
30İzleyin | CVE-2018-19181İstismar yok | statics/ueditor/php/vendor/Local.class.php in YUNUCMS 1.1.5 allows arbitrary file deletion via the statics/ueditor/php/controller.php?actionyunucms · yunucms · CWE-22 | Yüksek7,5 | — | %1,4 | 11 Kas 2018 |
24İzleyin | CVE-2018-17322İstismar yok | Cross-site scripting (XSS) vulnerability in index.php/index/category/index in YUNUCMS 1.1.4 allows remote attackers to inject arbitrary web yunucms · yunucms · CWE-79 | Orta6,1 | — | %0,7 | 21 Eyl 2018 |
24İzleyin | CVE-2020-18445İstismar yok | Cross Site Scripting (XSS) vulnerability exists in YUNUCMS 1.1.9 via the upurl function in Page.php.yunucms · yunucms · CWE-79 | Orta6,1 | — | %0,7 | 12 Ağu 2021 |
24İzleyin | CVE-2019-5310İstismar yok | YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php because crafted data can be written to the sys.php file, as demonstrated by site_tiyunucms · yunucms · CWE-79 | Orta6,1 | — | %0,6 | 4 Oca 2019 |
24İzleyin | CVE-2019-5311İstismar yok | An issue was discovered in YUNUCMS V1.1.8.yunucms · yunucms · CWE-79 | Orta6,1 | — | %0,6 | 4 Oca 2019 |
19İzleyin | CVE-2018-18725İstismar yok | An XSS issue was discovered in admin/banner/editbanner?id=20 in YUNUCMS 1.1.5.yunucms · yunucms · CWE-79 | Orta4,8 | — | %0,5 | 29 Eki 2018 |
19İzleyin | CVE-2018-18726İstismar yok | An XSS issue was discovered in admin/sitelink/editsitelink?id=16 in YUNUCMS 1.1.5.yunucms · yunucms · CWE-79 | Orta4,8 | — | %0,5 | 29 Eki 2018 |
19İzleyin | CVE-2018-18720İstismar yok | An XSS issue was discovered in index.php/admin/system/basic in YUNUCMS 1.1.5.yunucms · yunucms · CWE-79 | Orta4,8 | — | %0,5 | 29 Eki 2018 |
19İzleyin | CVE-2018-18721İstismar yok | An XSS issue was discovered in admin/link/editlink?id=5 in YUNUCMS 1.1.5.yunucms · yunucms · CWE-79 | Orta4,8 | — | %0,5 | 29 Eki 2018 |
19İzleyin | CVE-2018-18722İstismar yok | An XSS issue was discovered in admin/content/editcontent?id=29&gopage=1 in YUNUCMS 1.1.5.yunucms · yunucms · CWE-79 | Orta4,8 | — | %0,5 | 29 Eki 2018 |
19İzleyin | CVE-2018-18723İstismar yok | An XSS issue was discovered in index.php/admin/area/editarea/id/110000 in YUNUCMS 1.1.5.yunucms · yunucms · CWE-79 | Orta4,8 | — | %0,5 | 29 Eki 2018 |
19İzleyin | CVE-2018-18724İstismar yok | An XSS issue was discovered in index.php/admin/category/editcategory?id=73 in YUNUCMS 1.1.5.yunucms · yunucms · CWE-79 | Orta4,8 | — | %0,5 | 29 Eki 2018 |
19İzleyin | CVE-2020-18446İstismar yok | Cross Site Scripting (XSS) vulnerability exists in YUNUCMS 1.1.9 via the param parameter in the insertContent function in ContentModel.php.yunucms · yunucms · CWE-79 | Orta4,8 | — | %0,5 | 12 Ağu 2021 |
19İzleyin | CVE-2018-9993İstismar yok | YUNUCMS 1.0.7 has XSS via the content title on an admin/content/addcontent/cid/## page (aka a news center page).yunucms · yunucms · CWE-79 | Orta4,8 | — | %0,5 | 10 Nis 2018 |
- CVE-2018-1918039İzleyin
statics/app/index/controller/Install.php in YUNUCMS 1.1.5 (if install.lock is not present) allows remote attackers to execute arbitrary PHP
KritikCVSS 9,8İstismar yokEPSS %1yunucms · yunucms11 Kas 2018
- CVE-2018-1918130İzleyin
statics/ueditor/php/vendor/Local.class.php in YUNUCMS 1.1.5 allows arbitrary file deletion via the statics/ueditor/php/controller.php?action
YüksekCVSS 7,5İstismar yokEPSS %1yunucms · yunucms11 Kas 2018
- CVE-2018-1732224İzleyin
Cross-site scripting (XSS) vulnerability in index.php/index/category/index in YUNUCMS 1.1.4 allows remote attackers to inject arbitrary web
OrtaCVSS 6,1İstismar yokEPSS %0yunucms · yunucms21 Eyl 2018
- CVE-2020-1844524İzleyin
Cross Site Scripting (XSS) vulnerability exists in YUNUCMS 1.1.9 via the upurl function in Page.php.
OrtaCVSS 6,1İstismar yokEPSS %0yunucms · yunucms12 Ağu 2021
- CVE-2019-531024İzleyin
YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php because crafted data can be written to the sys.php file, as demonstrated by site_ti
OrtaCVSS 6,1İstismar yokEPSS %0yunucms · yunucms4 Oca 2019
- CVE-2019-531124İzleyin
An issue was discovered in YUNUCMS V1.1.8.
OrtaCVSS 6,1İstismar yokEPSS %0yunucms · yunucms4 Oca 2019
- CVE-2018-1872519İzleyin
An XSS issue was discovered in admin/banner/editbanner?id=20 in YUNUCMS 1.1.5.
OrtaCVSS 4,8İstismar yokEPSS %0yunucms · yunucms29 Eki 2018
- CVE-2018-1872619İzleyin
An XSS issue was discovered in admin/sitelink/editsitelink?id=16 in YUNUCMS 1.1.5.
OrtaCVSS 4,8İstismar yokEPSS %0yunucms · yunucms29 Eki 2018
- CVE-2018-1872019İzleyin
An XSS issue was discovered in index.php/admin/system/basic in YUNUCMS 1.1.5.
OrtaCVSS 4,8İstismar yokEPSS %0yunucms · yunucms29 Eki 2018
- CVE-2018-1872119İzleyin
An XSS issue was discovered in admin/link/editlink?id=5 in YUNUCMS 1.1.5.
OrtaCVSS 4,8İstismar yokEPSS %0yunucms · yunucms29 Eki 2018
- CVE-2018-1872219İzleyin
An XSS issue was discovered in admin/content/editcontent?id=29&gopage=1 in YUNUCMS 1.1.5.
OrtaCVSS 4,8İstismar yokEPSS %0yunucms · yunucms29 Eki 2018
- CVE-2018-1872319İzleyin
An XSS issue was discovered in index.php/admin/area/editarea/id/110000 in YUNUCMS 1.1.5.
OrtaCVSS 4,8İstismar yokEPSS %0yunucms · yunucms29 Eki 2018
- CVE-2018-1872419İzleyin
An XSS issue was discovered in index.php/admin/category/editcategory?id=73 in YUNUCMS 1.1.5.
OrtaCVSS 4,8İstismar yokEPSS %0yunucms · yunucms29 Eki 2018
- CVE-2020-1844619İzleyin
Cross Site Scripting (XSS) vulnerability exists in YUNUCMS 1.1.9 via the param parameter in the insertContent function in ContentModel.php.
OrtaCVSS 4,8İstismar yokEPSS %0yunucms · yunucms12 Ağu 2021
- CVE-2018-999319İzleyin
YUNUCMS 1.0.7 has XSS via the content title on an admin/content/addcontent/cid/## page (aka a news center page).
OrtaCVSS 4,8İstismar yokEPSS %0yunucms · yunucms10 Nis 2018