Yunyecms

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Yunyecms records in CISA KEV

No Yunyecms vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2020-14131 CVE-2020-21662 · GHSA-f5h7-5c2x-3qw8

HIGH 82

SQL injection vulnerability in yunyecms 2.0.2 allows remote attackers to run arbitrary SQL commands via XFF.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00797 Published 2023-07-31 No fix listed CWE-89

TI-2020-14042 CVE-2020-21377 · GHSA-m9vx-wm87-mjxm

MEDIUM 44

SQL injection vulnerability in yunyecms V2.0.1 via the selcart parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01009 Published 2020-12-21 No fix listed CWE-89