Login Request a demo
YI
Product
Yiiframework
by Yiiframework · last CVE Jan 22, 2018
4
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 2Medium 0Low 0
Severity
All severities4Critical0High2Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Yiiframework to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-6009
8.8
1%
Jan 22
In Yii Framework 2.x before 2.0.14, the switchIdentity function in web/User.php did not regenerate the CSRF token upon a change of identity
Affected: 2.0.0; 2.0.0; 2.0.0; 2.0.0; 2.0.1; 2.0.2; +14 more
CVE-2018-6010
7.5
3%
Jan 22
In Yii Framework 2.x before 2.0.14, remote attackers could obtain potentially sensitive information from exception messages, or exploit reflected XSS on the error handler page in…
Affected: 2.0.0; 2.0.0; 2.0.0; 2.0.0; 2.0.1; 2.0.2; +14 more
CVE-2015-3397
–
2%
May 14
Cross-site scripting (XSS) vulnerability in Yii Framework before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via vectors related to JSON, arrays, and…
Affected: through 2.0.3
CVE-2014-4672
–
2%
Jul 3
The CDetailView widget in Yii PHP Framework 1.1.14 allows remote attackers to execute arbitrary PHP scripts via vectors related to the value property
Affected: 1.1.14
Showing 4