| शीर्षक | YiFang CMS 2.0.5 Cross Site Scripting on app/db/admin/D_adManage.php name paramet |
|---|
| विवरण | A cross-site scripting (XSS) vulnerability exists in the name parameter of the /admin/adManage interface in the extended management module of yifangCMS version 2.0.5, which controls the ad list functionality. This stored XSS vulnerability arises because the name field is directly stored in the database without any filtering in the update() method of app/db/admin/D_adManage.php. An attacker can submit a malicious XSS script and trigger the vulnerability when accessing the ad list. |
|---|
| स्रोत | ⚠️ https://github.com/ZZCTD/CVE/issues/4 |
|---|
| उपयोगकर्ता | Anonymous User |
|---|
| सबमिशन | 10/02/2026 12:20 PM (9 महीनों पहले) |
|---|
| संयम | 21/02/2026 09:08 AM (11 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 347279 [YiFang CMS तक 2.0.5 Extended Management D_adManage.php update name क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|