lolipop1234/XXD
GitHub
CVE History
| CVE | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|
| 8.1 HIGH | 5.5 MEDIUM | ||
Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sql() method. | |||
| 8.8 HIGH | 6.5 MEDIUM | ||
Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the add() method. | |||
| 9.8 CRITICAL | 7.5 HIGH | ||
Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\point.php, which can be exploited via the add() method. | |||
| 9.8 CRITICAL | 7.5 HIGH | ||
Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the addqq() method. | |||
| 9.1 CRITICAL | 6.4 MEDIUM | ||
Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sj() method. | |||
| 4.8 MEDIUM | 3.5 LOW | ||
PbootCMS 2.0.2 allows XSS via vectors involving the Pboot/admin.php?p=/Single/index/mcode/1 and Pboot/?contact/ URIs. | |||
| 4.8 MEDIUM | 3.5 LOW | ||
admin/infoclass_update.php in PHPMyWind 5.6 has stored XSS. | |||