yylAdmin SQL Injection Vulnerability

yylAdmin is a minimalist backend management system based on ThinkPHP8 and Vue3 by skyselang individual developer. SQL injection vulnerability exists in yylAdmin 3.0 and earlier versions, the vulnerability stems from the parameter isdisable in the file /app/admin/controller/file/File.php which can...