Vulnerabilities > Joyplus Project
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-09-21 | CVE-2019-16660 | Cross-Site Request Forgery (CSRF) vulnerability in Joyplus Project Joyplus 1.6.0 joyplus-cms 1.6.0 has admin_ajax.php?action=savexml&tab=vodplay CSRF. | 6.8 |
| 2019-09-21 | CVE-2019-16656 | Improper Input Validation vulnerability in Joyplus Project Joyplus 1.6.0 joyplus-cms 1.6.0 allows remote attackers to execute arbitrary PHP code via /install by placing the code in the name of an object in the database. | 7.5 |
| 2019-09-21 | CVE-2019-16655 | Improper Input Validation vulnerability in Joyplus Project Joyplus 1.6.0 joyplus-cms 1.6.0 allows reinstallation if the install/ URI remains available. | 6.4 |
| 2018-07-22 | CVE-2018-14501 | SQL Injection vulnerability in Joyplus Project Joyplus-Cms 1.6.0 manager/admin_ajax.php in joyplus-cms 1.6.0 has SQL Injection, as demonstrated by crafted POST data beginning with an "m_id=1 AND SLEEP(5)" substring. | 7.5 |