Myucms Project Myucms
5 CVEs affecting Myucms Project Myucms. Latest disclosed: 2021-10-06. Critical: 3, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-21652 | Critical | 9.8 | 2021-10-06 | Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the addqq() method. |
CVE-2020-21651 | Critical | 9.8 | 2021-10-06 | Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\point.php, which can be exploited via the add() method. |
CVE-2020-21653 | Critical | 9.1 | 2021-10-06 | Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sj() method. |
CVE-2020-21650 | High | 8.8 | 2021-10-06 | Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the add() method. |
CVE-2020-21649 | High | 8.1 | 2021-10-06 | Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sql() method. |