← Back

Myucms

myucms

Vendor: Myucms Project • 5 CVEs

CVEs (5)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-21653
1Myucms Project
1Myucms
Nov 21, 2024
Oct 6, 2021
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sj() method.
CVE-2020-21652
1Myucms Project
1Myucms
Nov 21, 2024
Oct 6, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the addqq() method.
CVE-2020-21651
1Myucms Project
1Myucms
Nov 21, 2024
Oct 6, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\point.php, which can be exploited via the add() method.
CVE-2020-21650
1Myucms Project
1Myucms
Nov 21, 2024
Oct 6, 2021
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the add() method.
CVE-2020-21649
1Myucms Project
1Myucms
Nov 21, 2024
Oct 6, 2021
N/A· v4
8.1 HIGH· v3
5.5 MEDIUM· v2
Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sql() method.