Логотип exploitDog
bind:CVE-2020-18084
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2020-18084

Количество 2

Количество 2

nvd логотип

CVE-2020-18084

почти 5 лет назад

Cross Site Scripting (XSS) in yzmCMS v5.2 allows remote attackers to execute arbitrary code by injecting commands into the "referer" field of a POST request to the component "/member/index/login.html" when logging in.

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-8jm8-5rhf-cx7x

больше 3 лет назад

Cross Site Scripting (XSS) in yzmCMS v5.2 allows remote attackers to execute arbitrary code by injecting commands into the "referer" field of a POST request to the component "/member/index/login.html" when logging in.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2020-18084

Cross Site Scripting (XSS) in yzmCMS v5.2 allows remote attackers to execute arbitrary code by injecting commands into the "referer" field of a POST request to the component "/member/index/login.html" when logging in.

CVSS3: 6.1
1%
Низкий
почти 5 лет назад
github логотип
GHSA-8jm8-5rhf-cx7x

Cross Site Scripting (XSS) in yzmCMS v5.2 allows remote attackers to execute arbitrary code by injecting commands into the "referer" field of a POST request to the component "/member/index/login.html" when logging in.

1%
Низкий
больше 3 лет назад

Уязвимостей на страницу