Search vulnerabilities

Results 5

Export CSV
CVE-2020-21653

Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sj() method.

CVSS 3.1 · 9.1 Critical EPSS 1.2% KEV · Not listed
Vendors
Products
CVE-2020-21652

Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the addqq() method.

CVSS 3.1 · 9.8 Critical EPSS 2.8% KEV · Not listed
Vendors
Products
CVE-2020-21651

Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\point.php, which can be exploited via the add() method.

CVSS 3.1 · 9.8 Critical EPSS 3.3% KEV · Not listed
Vendors
Products
CVE-2020-21650

Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the add() method.

CVSS 3.1 · 8.8 High EPSS 3.2% KEV · Not listed
Vendors
Products
CVE-2020-21649

Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sql() method.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Products