GCVE - cpe:2.3:a:youdiancms:youdiancms:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:youdiancms:youdiancms:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Youdiancms (`21336191-42f4-5589-8e43-aa539325006c`)
Product	Youdiancms (`9d506f1c-0797-5c34-bf5e-79deacd3dbf3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-57052`	vulnerable	2026-06-08 06:56:13.360358	Details available An issue in youdiancms v.9.5.20 and before allows a remote attacker to escalate privileges via the sessionID parameter in the index.php file. Published: 2025-01-27T00:00:00.000Z Updated: 2025-01-28T19:38:17.195Z Open on db.gcve.eu Reference links https://gist.github.com/yahaha9/720fb45bbebda62dc198568c8d275df8	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-3117`	vulnerable	2026-06-08 06:41:52.519973	YouDianCMS ChannelAction.class.php unrestricted upload MEDIUM (4.7) A vulnerability classified as critical was found in YouDianCMS up to 9.5.12. This vulnerability affects unknown code of the file App\Lib\Action\Admin\ChannelAction.class.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-258778 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-03-31T01:31:03.901Z Updated: 2024-08-15T15:51:06.371Z Open on db.gcve.eu Reference links https://vuldb.com/?id.258778 https://vuldb.com/?ctiid.258778 https://vuldb.com/?submit.302925 https://github.com/Luci4n555/CVE-Report/blob/main/YouDianCMS9.5.12.md	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.