TI-2024-06789 CVE-2024-7328 · GHSA-pghv-3jm2-h5h5
YouDianCMS information disclosure
Priority MEDIUM 64
A vulnerability, which was classified as problematic, has been found in YouDianCMS 7.
Youdiancms
Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Youdiancms records in CISA KEVNo Youdiancms vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
12 records
TI-2025-03103 CVE-2025-3532 · GHSA-mvx9-jhjw-65p8
YouDianCMS index.html.Attackers cross site scripting
Priority MEDIUM 63
A vulnerability classified as problematic was found in YouDianCMS 9.5.21.
TI-2025-03104 CVE-2025-3533 · GHSA-x36r-q6h9-f8g8
YouDianCMS index.html.Attackers cross site scripting
Priority MEDIUM 57
A vulnerability, which was classified as problematic, has been found in YouDianCMS 9.5.21.
TI-2024-06791 CVE-2024-7330 · GHSA-773f-68wr-h5c8
YouDianCMS ydLib.php curl_exec server-side request forgery
Priority MEDIUM 57
A vulnerability has been found in YouDianCMS 7 and classified as critical.
TI-2024-06790 CVE-2024-7329 · GHSA-hm22-52r8-h92c
YouDianCMS image_upload.php unrestricted upload
Priority MEDIUM 57
A vulnerability, which was classified as critical, was found in YouDianCMS 7.
TI-2024-37768 CVE-2024-57052 · GHSA-4cf6-q58x-cj63
An issue in youdiancms v.9.5.20 and before allows a remote attacker to escalate…
Priority MEDIUM 49
An issue in youdiancms v.9.5.20 and before allows a remote attacker to escalate privileges via the sessionID parameter in the index.php file.
TI-2022-14005 CVE-2022-32301 · GHSA-hv28-fjgq-6mc5
YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the IdList…
Priority MEDIUM 44
YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the IdList parameter at /App/Lib/Action/Home/ApiAction.class.php.
TI-2022-14004 CVE-2022-32300 · GHSA-v4p3-q3fm-mfrr
YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the…
Priority MEDIUM 41
YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the MailSendID parameter at /App/Lib/Action/Admin/MailAction.class.php.
TI-2022-14003 CVE-2022-32299 · GHSA-7rg4-7rm4-x499
YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the id…
Priority MEDIUM 40
YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the id parameter at /App/Lib/Action/Admin/SiteAction.class.php.
TI-2020-13313 CVE-2020-18116 · GHSA-fc6g-6wpj-pwr9
A lack of filtering for searched keywords in the search bar of YouDianCMS 8.0 allows attackers to perform SQL injection.
Priority MEDIUM 40
A lack of filtering for searched keywords in the search bar of YouDianCMS 8.0 allows attackers to perform SQL injection.
TI-2025-03102 CVE-2025-3531 · GHSA-6whm-6hpx-vjhj
YouDianCMS index.html cross site scripting
Priority LOW 24
A vulnerability classified as problematic has been found in YouDianCMS 9.5.21.
TI-2024-02919 CVE-2024-3117 · GHSA-36w6-w44m-xqj9
YouDianCMS ChannelAction.class.php unrestricted upload
Priority LOW 23
A vulnerability classified as critical was found in YouDianCMS up to 9.5.12.