RSS   Podatności dla 'Phpyun'   RSS

2021-05-21
 
CVE-2020-23768

CWE-200
 
 
An information disclosure vulnerability was discovered in alipay_function.php in the log file of Alibaba payment interface on PHPPYUN prior to version 5.0.1. If exploited, this vulnerability will allow attackers to obtain users' personally identifiable information including e-mail address and telephone numbers.

 
2018-10-29
 
CVE-2018-18713

CWE-22
 
 
The function down_sql_action() in /admin/model/database.class.php in PHPYun 4.6 allows remote attackers to read arbitrary files via directory traversal in an m=database&c=down_sql&name=../ URI.

 
2018-10-23
 
CVE-2018-18626

CWE-20
 
 
An issue was discovered in PHPYun V4.6. There is a vulnerability that can delete any file or directory via the "admin/index.php?m=database&c=del" sql parameter because del_action() in admin/model/database.class.php mishandles this parameter.

 
2011-04-26
 
CVE-2010-4796

CWE-89
 
 
Multiple SQL injection vulnerabilities in PHPYun 1.1.6 allow remote attackers to execute arbitrary SQL commands via the (1) provinceid parameter to search.php and the (2) e parameter to resumeview.php.

 

Copyright 2024, cxsecurity.com

 

Back to Top