CVE-2025-25960中 6.1Cross Site Scripting vulnerability in phpcmsv9 v.9.6.3 allows a remote attacker to escalate privileges via the menu interface of the member …
CVE-2025-25958中 5.4Cross Site Scripting vulnerabilities in phpcmsv9 v.9.6.3 allows a remote attacker to escalate privileges via a crafted script.
CVE-2021-40910中 6.1There is a reflective cross-site scripting (XSS) vulnerability in the PHPCMS V9.6.3 management side.
CVE-2020-22203緊急 9.8SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php.
CVE-2020-22201高 8.8phpCMS 2008 sp4 allowas remote malicious users to execute arbitrary php commands via the pagesize parameter to yp/product.php.