İçeriğe atla
Noroxi

yzmcms kayıtları

yzmcms üreticisine ait 47 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
5
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

47 kayıt
  • CVE-2018-11554
    39İzleyin

    The forgotten-password feature in index.php/member/reset/reset_email.html in YzmCMS v3.2 through v3.7 has a Response Discrepancy Information

    KritikCVSS 9,8İstismar yokEPSS %1

    yzmcms · yzmcms5 Haz 2018

  • CVE-2022-23383
    36İzleyin

    YzmCMS v6.3 is affected by broken access control.

    KritikCVSS 9,1İstismar yokEPSS %1

    yzmcms · yzmcms10 Mar 2022

  • CVE-2022-23888
    35İzleyin

    YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgey (CSRF) via the component /yzmcms/comment/index/init.html.

    YüksekCVSS 8,8İstismar yokEPSS %1

    yzmcms · yzmcms28 Oca 2022

  • CVE-2020-19951
    35İzleyin

    A cross-site request forgery (CSRF) in /controller/pay.class.php of YzmCMS v5.5 allows attackers to access sensitive components of the appli

    YüksekCVSS 8,8İstismar yokEPSS %1

    yzmcms · yzmcms23 Eyl 2021

  • CVE-2022-23384
    35İzleyin

    YzmCMS v6.3 is affected by Cross Site Request Forgery (CSRF) in /admin.add

    YüksekCVSS 8,8İstismar yokEPSS %1

    yzmcms · yzmcms15 Şub 2022

  • CVE-2020-23595
    35İzleyin

    Cross Site Request Forgery (CSRF) vulnerability in yzmcms version 5.6, allows remote attackers to escalate privileges and gain sensitive inf

    YüksekCVSS 8,8İstismar yokEPSS %1

    yzmcms · yzmcms11 Ağu 2023

  • CVE-2018-20015
    35İzleyin

    YzmCMS v5.2 has admin/role/add.html CSRF.

    YüksekCVSS 8,8İstismar yokEPSS %1

    yzmcms · yzmcms10 Ara 2018

  • CVE-2020-20341
    30İzleyin

    YzmCMS v5.5 contains a server-side request forgery (SSRF) in the grab_image() function.

    YüksekCVSS 7,5İstismar yokEPSS %1

    yzmcms · yzmcms1 Eyl 2021

  • CVE-2020-35970
    30İzleyin

    An issue was discovered in YzmCMS 5.8.

    YüksekCVSS 7,5İstismar yokEPSS %1

    yzmcms · yzmcms3 Haz 2021

  • CVE-2018-8756
    29İzleyin

    Eval injection in yzmphp/core/function/global.func.php in YzmCMS v3.7.1 allows remote attackers to achieve arbitrary code execution via PHP

    YüksekCVSS 7,2İstismar yokEPSS %3

    yzmcms · yzmcms18 Mar 2018

  • CVE-2018-7579
    28İzleyin

    \application\admin\controller\update_urls.class.php in YzmCMS 3.6 has SQL Injection via the catids array parameter to admin/update_urls/upda

    YüksekCVSS 7,2İstismar yokEPSS %1

    yzmcms · yzmcms1 Mar 2018

  • CVE-2024-28725
    28İzleyin

    Cross Site Scripting (XSS) vulnerability in YzmCMS 7.0 allows attackers to run arbitrary code via Ads Management, Carousel Management, and S

    YüksekCVSS 7,1İstismar yokEPSS %0

    yzmcms · yzmcms6 May 2024

  • CVE-2018-10224
    27İzleyin

    An issue was discovered in YzmCMS 3.8.

    OrtaCVSS 6,8İstismar yokEPSS %0

    yzmcms · yzmcms19 Nis 2018

  • CVE-2018-10223
    27İzleyin

    An issue was discovered in YzmCMS 3.8.

    OrtaCVSS 6,8İstismar yokEPSS %0

    yzmcms · yzmcms19 Nis 2018

  • CVE-2018-7653
    26İzleyin

    In YzmCMS 3.6, index.php has XSS via the a, c, or m parameter.

    OrtaCVSS 6,1Kavram kanıtıEPSS %8

    yzmcms · yzmcms4 Mar 2018

  • CVE-2022-23887
    26İzleyin

    YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily delete user accounts via /ad

    OrtaCVSS 6,5İstismar yokEPSS %1

    yzmcms · yzmcms28 Oca 2022

  • CVE-2019-16678
    26İzleyin

    admin/urlrule/add.html in YzmCMS 5.3 allows CSRF with a resultant denial of service by adding a superseding route.

    OrtaCVSS 6,5İstismar yokEPSS %1

    yzmcms · yzmcms21 Eyl 2019

  • CVE-2020-20502
    26İzleyin

    Cross Site Request Forgery found in yzCMS v.2.0 allows a remote attacker to execute arbitrary code via the token check function.

    OrtaCVSS 6,5İstismar yokEPSS %0

    yzmcms · yzmcms20 Haz 2023

  • CVE-2020-18084
    24İzleyin

    Cross Site Scripting (XSS) in yzmCMS v5.2 allows remote attackers to execute arbitrary code by injecting commands into the "referer" field o

    OrtaCVSS 6,1İstismar yokEPSS %1

    yzmcms · yzmcms30 Nis 2021

  • CVE-2019-16532
    24İzleyin

    An HTTP Host header injection vulnerability exists in YzmCMS V5.3.

    OrtaCVSS 6,1İstismar yokEPSS %1

    yzmcms · yzmcms26 Eyl 2019

  • CVE-2020-23369
    24İzleyin

    In YzmCMS 5.6, XSS was discovered in member/member_content/init.html via the SRC attribute of an IFRAME element because of using UEditor 1.4

    OrtaCVSS 6,1İstismar yokEPSS %1

    yzmcms · yzmcms10 May 2021

  • CVE-2018-19092
    24İzleyin

    An issue was discovered in YzmCMS v5.2.

    OrtaCVSS 6,1İstismar yokEPSS %1

    yzmcms · yzmcms7 Kas 2018

  • CVE-2020-22394
    24İzleyin

    In YzmCMS v5.5 the member contribution function in the editor contains a cross-site scripting (XSS) vulnerability.

    OrtaCVSS 6,1İstismar yokEPSS %1

    yzmcms · yzmcms19 Kas 2020

  • CVE-2024-24291
    24İzleyin

    An issue in the component /member/index/login of yzmcms v7.0 allows attackers to direct users to malicious sites via a crafted URL.

    OrtaCVSS 6,1İstismar yokEPSS %0

    yzmcms · yzmcms6 Şub 2024

  • CVE-2023-52274
    24İzleyin

    member/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header.

    OrtaCVSS 6,1İstismar yokEPSS %0

    yzmcms · yzmcms10 Oca 2024