Top technology
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Yzmcms
HIGH 7.2
CVE-2018-8756
Eval injection in yzmphp/core/function/global.func.php in YzmCMS v3.7.1 allows remote attackers to achieve arbitrary code execution via PHP code in t…
No fix yet
Fix from $1,950
2018-03-18
Yzmcms
MEDIUM 5.4
CVE-2018-8078
YzmCMS 3.7 has Stored XSS via the title parameter to advertisement/adver/edit.html.
No fix yet
Fix from $1,600
2018-03-13
Yzmcms
MEDIUM 6.1
CVE-2018-7653EPSS 8%
In YzmCMS 3.6, index.php has XSS via the a, c, or m parameter.
No fix yet
Fix from $1,600
2018-03-04
Yzmcms
HIGH 7.2
CVE-2018-7579
\application\admin\controller\update_urls.class.php in YzmCMS 3.6 has SQL Injection via the catids array parameter to admin/update_urls/update_catego…
No fix yet
Fix from $1,950
2018-03-01
Yzmcms
MEDIUM 5.3
CVE-2018-7479
YzmCMS 3.6 allows remote attackers to discover the full path via a direct request to application/install/templates/s1.php.
No fix yet
Fix from $1,600
2018-02-26