Myucms Project: >> Myucms >> 2.2 Security Vulnerabilities
Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sql() method.
CVSS Score
8.1
EPSS Score
0.002
Published
2021-10-06
Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the add() method.
CVSS Score
8.8
EPSS Score
0.031
Published
2021-10-06
Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\point.php, which can be exploited via the add() method.
CVSS Score
9.8
EPSS Score
0.035
Published
2021-10-06
Myucms v2.2.1 contains a remote code execution (RCE) vulnerability in the component \controller\Config.php, which can be exploited via the addqq() method.
CVSS Score
9.8
EPSS Score
0.03
Published
2021-10-06
Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploited via the sj() method.
CVSS Score
9.1
EPSS Score
0.003
Published
2021-10-06