Yuba
4 CVEs tracked since 2015. Since Feb 2015, none of them reached CISA KEV.
Yuba CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2015-02 | 4 | 0 |
Products
The products that kept showing up in Yuba's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 7 most recently published vulnerabilities affecting Yuba.
- CVE-2022-34937Yuba u5cms v8.3.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component savepage.php. This vulnerability allows attackers to execute arbitrary code.8.8
- CVE-2022-32442u5cms version 8.3.5 is vulnerable to Cross Site Scripting (XSS). When a user accesses the default home page if the parameter passed in is http://127.0.0.1/? "Onmouseover=%27tzgl (96502)%27bad=", it...6.1
- CVE-2022-32444An issue was discovered in u5cms verion 8.3.5 There is a URL redirection vulnerability that can cause a user's browser to be redirected to another site via /loginsave.php.6.1
- CVE-2015-1577Directory traversal vulnerability in u5admin/deletefile.php in u5CMS before 3.9.4 allows remote attackers to write to arbitrary files via a (1) .. (dot dot) or (2) full pathname in the f parameter.6.4
- CVE-2015-1576Multiple SQL injection vulnerabilities in u5CMS before 3.9.4 allow remote attackers to execute arbitrary SQL commands via the name parameter to (1) copy2.php, (2) localize.php, (3) metai.php, (4) n...7.5
- CVE-2015-1575Multiple cross-site scripting (XSS) vulnerabilities in u5CMS before 3.9.4 allow remote attackers to inject arbitrary web script or HTML via the (1) c, (2) i, (3) l, or (4) p parameter to index.php;...4.3
- CVE-2015-1578Multiple open redirect vulnerabilities in u5CMS before 3.9.4 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the (1) pidvesa cookie to u5ad...5.8
The record
- Peak rank
- #30 in Feb 2015
- Busiest month shown
- Feb 2015, 4 CVEs
- Months with a KEV entry
- 0 since Feb 2015
- Monthly snapshots
- 1 since 2015