Vulnerabilities > Youke365
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-01-08 | CVE-2024-0303 | Server-Side Request Forgery (SSRF) vulnerability in Youke365 Youke 365 1.5.0/1.5.3 A vulnerability, which was classified as critical, was found in Youke365 up to 1.5.3. | 9.8 |
| 2024-01-08 | CVE-2024-0304 | Unspecified vulnerability in Youke365 Youke 365 1.5.0/1.5.3 A vulnerability has been found in Youke365 up to 1.5.3 and classified as critical. | 9.8 |
| 2018-10-11 | CVE-2018-18215 | Cross-Site Request Forgery (CSRF) vulnerability in Youke365 Youke 365 1.1.5 In youke365 v1.1.5, admin/user.html has a CSRF vulnerability that can add an user account. | 8.8 |
| 2018-10-11 | CVE-2018-18242 | SQL Injection vulnerability in Youke365 Youke 365 1.1.5 youke365 v1.1.5 has SQL injection via admin/login.html, as demonstrated by username=admin&pass=123456&code=9823&act=login&submit=%E7%99%BB+%E9%99%86. | 9.8 |