youdiancms Privilege Escalation Vulnerability

Vulnerability

A privilege escalation vulnerability exists in youdiancms versions through 9.5.20. The issue arises in the index.php file, where the sessionID parameter can be manipulated by remote attackers to escalate privileges.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
3.4
impact
5.0
exploitability
5.4
remediation
0.0
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.