Yunucms

Records15All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Yunucms records in CISA KEV

No Yunucms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Yunucms 15 records MEDIUM

Records

15 records

TI-2018-13602 CVE-2018-19180 · GHSA-2q6f-jmhv-h8gr

statics/app/index/controller/Install.php in YUNUCMS 1.1.5 (if install.lock is not…

MEDIUM 45

statics/app/index/controller/Install.php in YUNUCMS 1.1.5 (if install.lock is not present) allows remote attackers to execute arbitrary PHP code by placing this code in the index.php?s=index/install/setup2 DB_PREFIX fiel…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01508 Published 2018-11-11 No fix listed CWE-94

TI-2018-13603 CVE-2018-19181 · GHSA-ff6p-c229-3p2r

statics/ueditor/php/vendor/Local.class.php in YUNUCMS 1.1.5 allows arbitrary file…

LOW 36

statics/ueditor/php/vendor/Local.class.php in YUNUCMS 1.1.5 allows arbitrary file deletion via the statics/ueditor/php/controller.php?action=remove key parameter, as demonstrated by using directory traversal to delete th…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01449 Published 2018-11-11 No fix listed CWE-22

TI-2018-12358 CVE-2018-17322 · GHSA-h8wm-cv99-qqwr

Cross-site scripting (XSS) vulnerability in index.php/index/category/index in YUNUCMS…

LOW 29

Cross-site scripting (XSS) vulnerability in index.php/index/category/index in YUNUCMS 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the area parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00756 Published 2018-09-22 No fix listed CWE-79

TI-2020-13392 CVE-2020-18445 · GHSA-gp69-gv9q-c6wx

Cross Site Scripting (XSS) vulnerability exists in YUNUCMS 1.1.9 via the upurl function in Page.php.

LOW 28

Cross Site Scripting (XSS) vulnerability exists in YUNUCMS 1.1.9 via the upurl function in Page.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00717 Published 2021-08-12 No fix listed CWE-79

TI-2019-03740 CVE-2019-5311 · GHSA-v9qw-9jcx-4xcv

An issue was discovered in YUNUCMS V1.1.8.

LOW 28

An issue was discovered in YUNUCMS V1.1.8.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00675 Published 2019-01-04 No fix listed CWE-79

TI-2019-03739 CVE-2019-5310 · GHSA-99ph-jqwh-hvgr

YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php because crafted data can be…

LOW 28

YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php because crafted data can be written to the sys.php file, as demonstrated by site_title in an admin/system/basic POST request.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00675 Published 2019-01-04 No fix listed CWE-79

TI-2020-13393 CVE-2020-18446 · GHSA-25x6-2hgw-h5x4

Cross Site Scripting (XSS) vulnerability exists in YUNUCMS 1.1.9 via the param parameter…

LOW 23

Cross Site Scripting (XSS) vulnerability exists in YUNUCMS 1.1.9 via the param parameter in the insertContent function in ContentModel.php.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00527 Published 2021-08-12 No fix listed CWE-79

TI-2018-13245 CVE-2018-18726 · GHSA-v3vj-7r28-grmc