Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sj() method.
Search vulnerabilities
CVE-2020-21653
CVSS 3.1 · 9.1 Critical
EPSS 1.2%
KEV · Not listed
Vendors
Products
CVE-2020-21652
Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the addqq() method.
CVSS 3.1 · 9.8 Critical
EPSS 2.8%
KEV · Not listed
Vendors
Products
CVE-2020-21651
Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\point.php, which can be exploited via the add() method.
CVSS 3.1 · 9.8 Critical
EPSS 3.3%
KEV · Not listed
Vendors
Products
CVE-2020-21650
Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the add() method.
CVSS 3.1 · 8.8 High
EPSS 3.2%
KEV · Not listed
Vendors
Products
CVE-2020-21649
Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sql() method.
CVSS 3.1 · 8.1 High
EPSS < 1%
KEV · Not listed
Vendors
Products
Page 1 of 1.