RSS   Vulnerabilities for 'Myucms'   RSS

2021-10-06
 
CVE-2020-21649

CWE-918
 

 
Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sql() method.

 
 
CVE-2020-21650

CWE-94
 

 
Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the add() method.

 


Copyright 2024, cxsecurity.com

 

Back to Top