Browse CVEs

MEDIUM 6.1 CVE-2025-3533 A vulnerability, which was classified as problematic, has been found in YouDianCMS 9.5.21. This issue affects some unknown processing of the file /Ap… Youdiancms No fix yet Fix from $1,6002025-04-13 MEDIUM 6.1 CVE-2025-3532 A vulnerability classified as problematic was found in YouDianCMS 9.5.21. This vulnerability affects unknown code of the file /App/Tpl/Member/Default… Youdiancms No fix yet Fix from $1,6002025-04-13 MEDIUM 6.1 CVE-2025-3531 A vulnerability classified as problematic has been found in YouDianCMS 9.5.21. This affects an unknown part of the file /App/Tpl/Admin/Default/Log/in… Youdiancms No fix yet Fix from $1,6002025-04-13 CRITICAL 9.8 CVE-2024-57052 An issue in youdiancms v.9.5.20 and before allows a remote attacker to escalate privileges via the sessionID parameter in the index.php file. Youdiancms after 9.5.20 Fix from $2,3002025-01-27 MEDIUM 6.3 CVE-2024-7330 A vulnerability has been found in YouDianCMS 7 and classified as critical. Affected by this vulnerability is the function curl_exec of the file /App/… Youdiancms No fix yet Fix from $1,6002024-08-01 CRITICAL 9.8 CVE-2024-7329 A vulnerability, which was classified as critical, was found in YouDianCMS 7. Affected is an unknown function of the file /Public/ckeditor/plugins/mu… Youdiancms No fix yet Fix from $2,3002024-07-31 MEDIUM 5.3 CVE-2024-7328 A vulnerability, which was classified as problematic, has been found in YouDianCMS 7. This issue affects some unknown processing of the file /t.php?a… Youdiancms No fix yet Fix from $1,6002024-07-31 CRITICAL 9.8 CVE-2022-32301 YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the IdList parameter at /App/Lib/Action/Home/ApiAction.class.php. Youdiancms No fix yet Fix from $2,3002022-06-15 HIGH 8.8 CVE-2022-32299 YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the id parameter at /App/Lib/Action/Admin/SiteAction.class.php. Youdiancms No fix yet Fix from $1,9502022-06-15 HIGH 8.8 CVE-2022-32300 YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the MailSendID parameter at /App/Lib/Action/Admin/MailAction.class.php. Youdiancms No fix yet Fix from $1,9502022-06-15 HIGH 8.8 CVE-2020-18116 A lack of filtering for searched keywords in the search bar of YouDianCMS 8.0 allows attackers to perform SQL injection. Youdiancms No fix yet Fix from $1,9502021-08-27