Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2020-35970
Disclosure Date: June 03, 2021 (last updated February 22, 2025)
An issue was discovered in YzmCMS 5.8. There is a SSRF vulnerability in the background collection management that allows arbitrary file read.
0
Attacker Value
Unknown
CVE-2020-35972
Disclosure Date: June 03, 2021 (last updated February 22, 2025)
An issue was discovered in YzmCMS V5.8. There is a CSRF vulnerability that can add member user accounts via member/member/add.html.
0
Attacker Value
Unknown
CVE-2020-35971
Disclosure Date: June 03, 2021 (last updated February 22, 2025)
A storage XSS vulnerability is found in YzmCMS v5.8, which can be used by attackers to inject JS code and attack malicious XSS on the /admin/system_manage/user_config_edit.html page.
0
