Security Advisory

CVE-2019-5310

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-01-04 14:00:00
Last updated 2024-09-17 00:31:00
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

YUNUCMS 1.1.8 has XSS in app/admin/controller/System.php because crafted data can be written to the sys.php file, as demonstrated by site_title in an admin/system/basic POST request.