CVE-2024-57052

An issue in youdiancms v.9.5.20 and before allows a remote attacker to escalate privileges via the sessionID parameter in the index.php file.
CVSS

No CVSS.

References
Configurations

Configuration 1 (hide)

cpe:2.3:a:youdiancms:youdiancms:*:*:*:*:*:*:*:*

History

27 Jun 2025, 19:03

Type Values Removed Values Added
First Time Youdiancms
Youdiancms youdiancms
CPE cpe:2.3:a:youdiancms:youdiancms:*:*:*:*:*:*:*:*
References () https://gist.github.com/yahaha9/720fb45bbebda62dc198568c8d275df8 - () https://gist.github.com/yahaha9/720fb45bbebda62dc198568c8d275df8 - Third Party Advisory

27 Jan 2025, 23:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-01-27 23:15

Updated : 2025-06-27 19:03


NVD link : CVE-2024-57052

Mitre link : CVE-2024-57052


JSON object : View

Products Affected

youdiancms

  • youdiancms
CWE

No CWE.