TI-2025-03104 CVE-2025-3533 · GHSA-x36r-q6h9-f8g8
YouDianCMS index.html.Attackers cross site scripting
Priority MEDIUM 57
A vulnerability, which was classified as problematic, has been found in YouDianCMS 9.5.21.
Vulnerabilities
12 records
TI-2025-03103 CVE-2025-3532 · GHSA-mvx9-jhjw-65p8
YouDianCMS index.html.Attackers cross site scripting
Priority MEDIUM 63
A vulnerability classified as problematic was found in YouDianCMS 9.5.21.
TI-2025-03102 CVE-2025-3531 · GHSA-6whm-6hpx-vjhj
YouDianCMS index.html cross site scripting
Priority LOW 24
A vulnerability classified as problematic has been found in YouDianCMS 9.5.21.
TI-2024-37768 CVE-2024-57052 · GHSA-4cf6-q58x-cj63
An issue in youdiancms v.9.5.20 and before allows a remote attacker to escalate…
Priority MEDIUM 49
An issue in youdiancms v.9.5.20 and before allows a remote attacker to escalate privileges via the sessionID parameter in the index.php file.
TI-2024-06791 CVE-2024-7330 · GHSA-773f-68wr-h5c8
YouDianCMS ydLib.php curl_exec server-side request forgery
Priority MEDIUM 57
A vulnerability has been found in YouDianCMS 7 and classified as critical.
TI-2024-06790 CVE-2024-7329 · GHSA-hm22-52r8-h92c
YouDianCMS image_upload.php unrestricted upload
Priority MEDIUM 57
A vulnerability, which was classified as critical, was found in YouDianCMS 7.
TI-2024-06789 CVE-2024-7328 · GHSA-pghv-3jm2-h5h5
YouDianCMS information disclosure
Priority MEDIUM 64
A vulnerability, which was classified as problematic, has been found in YouDianCMS 7.
TI-2024-02919 CVE-2024-3117 · GHSA-36w6-w44m-xqj9
YouDianCMS ChannelAction.class.php unrestricted upload
Priority LOW 23
A vulnerability classified as critical was found in YouDianCMS up to 9.5.12.
TI-2022-14005 CVE-2022-32301 · GHSA-hv28-fjgq-6mc5
YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the IdList…
Priority MEDIUM 44
YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the IdList parameter at /App/Lib/Action/Home/ApiAction.class.php.
TI-2022-14004 CVE-2022-32300 · GHSA-v4p3-q3fm-mfrr
YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the…
Priority MEDIUM 41
YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the MailSendID parameter at /App/Lib/Action/Admin/MailAction.class.php.
TI-2022-14003 CVE-2022-32299 · GHSA-7rg4-7rm4-x499
YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the id…
Priority MEDIUM 40
YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the id parameter at /App/Lib/Action/Admin/SiteAction.class.php.
TI-2020-13313 CVE-2020-18116 · GHSA-fc6g-6wpj-pwr9
A lack of filtering for searched keywords in the search bar of YouDianCMS 8.0 allows attackers to perform SQL injection.
Priority MEDIUM 40
A lack of filtering for searched keywords in the search bar of YouDianCMS 8.0 allows attackers to perform SQL injection.