Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2018-7733

An issue was discovered in YxtCMF 3.1. RbacController.class.php has CSRF, as demonstrated by modifying an administrator account via index.php/admin/user/add_post.html.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Yxtcmf
Products
Yxtcmf
CVE-2018-7732

An issue was discovered in YxtCMF 3.1. SQL Injection exists in ShitiController.class.php via the ids array parameter to exam/shiti/delshiti.html.

CVSS 3.0 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Yxtcmf
Products
Yxtcmf