Youke365

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Youke365 records in CISA KEV

No Youke365 vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records

TI-2018-12891 CVE-2018-18242 · GHSA-8m3w-jmx4-qw7q

MEDIUM 44

youke365 v1.1.5 has SQL injection via admin/login.html, as demonstrated by username=admin&pass=123456&code=9823&act=login&submit=%E7%99%BB+%E9%99%86.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01135 Published 2018-10-11 No fix listed CWE-89

TI-2024-00279 CVE-2024-0304 · GHSA-w69p-f797-2jf5

MEDIUM 43

A vulnerability has been found in Youke365 up to 1.5.3 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.005 Published 2024-01-08 No fix listed CWE-918

TI-2024-00278 CVE-2024-0303 · GHSA-6vcr-w6p9-3j89

MEDIUM 43

A vulnerability, which was classified as critical, was found in Youke365 up to 1.5.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.005 Published 2024-01-08 No fix listed CWE-918

TI-2018-12884 CVE-2018-18215 · GHSA-6cp9-4fr2-qm6j

LOW 39

In youke365 v1.1.5, admin/user.html has a CSRF vulnerability that can add an user account.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00494 Published 2018-10-11 No fix listed CWE-352