CVE-2020-18445

Mô tả

Tham khảo

• doublefast/yunucms · Third Party Advisory
• doublefast/yunucms · Exploit

Lỗ hổng khác của yunucms

• CVE-2020-18446TRUNG BÌNH 4.8Cross Site Scripting (XSS) vulnerability exists in YUNUCMS 1.1.9 via the param parameter in the insertContent function in ContentModel.php.
• CVE-2019-5311TRUNG BÌNH 6.1An issue was discovered in YUNUCMS V1.1.8. app/index/controller/Show.php has an XSS vulnerability via the index.php/index/show/index cw para…
• CVE-2019-5310TRUNG BÌNH 6.1YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php because crafted data can be written to the sys.php file, as demonstrated by site_ti…
• CVE-2018-19181CAO 7.5statics/ueditor/php/vendor/Local.class.php in YUNUCMS 1.1.5 allows arbitrary file deletion via the statics/ueditor/php/controller.php?action…
• CVE-2018-19180NGHIÊM TRỌNG 9.8statics/app/index/controller/Install.php in YUNUCMS 1.1.5 (if install.lock is not present) allows remote attackers to execute arbitrary PHP …