Advisories · Technology
Yifang CMS.
Every CVE that names Yifang CMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.1 Medium
Yifang CMS Extended Management L_rbac_admin.php store cross site scripting
- Yifang CMS
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
YiFang CMS D_singlePageGroup.php update cross site scripting
- YiFang CMS
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
YiFang CMS D_singlePage.php update cross site scripting
- YiFang CMS
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
YiFang CMS D_friendLink.php update cross site scripting
- YiFang CMS
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
YiFang CMS Extended Management D_friendLinkGroup.php update cross site scripting
- YiFang CMS
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
YiFang CMS Extended Management D_adManage.php update cross site scripting
- YiFang CMS
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
YiFang CMS Extended Management D_adPosition.php update cross site scripting
- YiFang CMS
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
YiFang CMS Backend File.php webUploader unrestricted upload
- YiFang CMS
- Broken access control
- Unrestricted file upload
- CVSS 5.3 Medium
YiFang CMS P_file.php mergeMultipartUpload unrestricted upload
- YiFang CMS
- Broken access control
- Unrestricted file upload
- CVSS 5.3 Medium
YiFang CMS L_tool.php sql injection
- YiFang CMS
- Other injection
- SQL injection
- CVSS 6.9 Medium
YiFang CMS Migrate.php exportInstallTable information disclosure
- YiFang CMS
- Information disclosure
- Broken access control
- CVSS 4.8 Medium
Yifang CMS Article Management Module cross site scripting
- Yifang CMS
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Yifang CMS Admin Panel downloadFile path traversal
- Yifang CMS
- Path traversal