Joyplus Project Joyplus
3 CVEs affecting Joyplus Project Joyplus. Latest disclosed: 2019-09-21. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-16656 | Critical | 9.8 | 2019-09-21 | joyplus-cms 1.6.0 allows remote attackers to execute arbitrary PHP code via /install by placing the code in the name of an object in the database. |
CVE-2019-16660 | High | 8.8 | 2019-09-21 | joyplus-cms 1.6.0 has admin_ajax.php?action=savexml&tab=vodplay CSRF. |
CVE-2019-16655 | High | 7.5 | 2019-09-21 | joyplus-cms 1.6.0 allows reinstallation if the install/ URI remains available. |