Youke365 Youke 365 — known CVE vulnerabilities

Every CVE whose affected-product data names Youke365 Youke 365, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2018-18242 — CVSS 9.8 (critical): youke365 v1.1.5 has SQL injection via admin/login.html, as demonstrated by username=admin&pass=123456&code=9823&act=login&submit=%E7%99%BB+%…
• CVE-2018-18215 — CVSS 8.8 (high): In youke365 v1.1.5, admin/user.html has a CSRF vulnerability that can add an user account.
• CVE-2024-0303 — CVSS 6.3 (medium): A vulnerability, which was classified as critical, was found in Youke365 up to 1.5.3. Affected is an unknown function of the file…
• CVE-2024-0304 — CVSS 6.3 (medium): A vulnerability has been found in Youke365 up to 1.5.3 and classified as critical. Affected by this vulnerability is an unknown…