AI Score
Confidence
High
EPSS
Percentile
94.4%
Unrestricted file upload vulnerability in the yccms 3.3 project. The xhUp function’s improper judgment of the request parameters, triggers remote code execution.
www.yccms.net/
blog.jiguang.xyz/posts/remote-code-execution-via-upload-image/