Design/Logic Flaw

2019-09-2616:15:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

81.0%

An HTTP Host header injection vulnerability exists in YzmCMS V5.3. A malicious user can poison a web cache or trigger redirections.

CPENameOperatorVersion
yzmcmseq5.3

CPE	Name	Operator	Version
	yzmcms	eq	5.3

References

github.com/yzmcms/yzmcms/issues/28

www.exploit-db.com/exploits/47422