41 matches found
PT-2023-22794 · Yfcmf · Yfcmf
Name of the Vulnerable Software and Affected Versions: YFCMF versions up to 3.0.4 Description: A problematic issue affects the processing of the file app/admin/controller/Ajax.php. The manipulation of the controllername argument leads to path traversal, allowing an attacker to access files using...
YFCMF 安全漏洞
YFCMF is a software application. It provides a lightweight enterprise website management system. A security vulnerability exists in YFCMF before 3.0.4, which stems from unknown processing in app/admin/controller/Ajax.php that causes path traversal via the parameter controllername...
File upload vulnerability in YFCMF backend
YFCMF is a backend content management system using ThinkPHP 5.1. + foreign ACE 1.40 UI template. A file upload vulnerability exists in the background of YFCMF, which can be exploited by attackers to gain control of the server...
YFCMF Remote Command Execution Vulnerability
YFCMF is Hunan Renren Technology Co., Ltd. developed a set of back-end content management framework based on ThinkPHP5.1. + foreign ACE1.40 UI template. A remote command execution vulnerability exists in YFCMF v2.3.1. An attacker can exploit this vulnerability by sending a constructed POST messag...
CVE-2020-23691
YFCMF v2.3.1 has a Remote Command Execution RCE vulnerability in the index.php...
CVE-2020-23691
YFCMF v2.3.1 has a Remote Command Execution RCE vulnerability in the index.php...
CVE-2020-23689
In YFCMF v2.3.1, there is a stored XSS vulnerability in the comments section of the news page...
CVE-2020-23689
In YFCMF v2.3.1, there is a stored XSS vulnerability in the comments section of the news page...
Cross site scripting
In YFCMF v2.3.1, there is a stored XSS vulnerability in the comments section of the news page...
CVE-2020-23691
YFCMF v2.3.1 has a Remote Command Execution RCE vulnerability in the index.php...
CVE-2020-23691
CVE-2020-23691 affects YFCMF v2.3.1. Multiple connected sources describe a Remote Command Execution (RCE) vulnerability in the package’s index.php. The underlying issue enables an attacker to craft a POST request to index.php to execute system commands on the hosting environment. Reported in vari...
CVE-2020-23689
CVE-2020-23689 affects YFCMF v2.3.1, with a stored cross-site scripting (XSS) vulnerability in the news page comments. The issue is evidenced across multiple sources (NVD entry and Red Hat/OSS references) noting a stored XSS in the comments section. The CVSS data indicates a medium severity (CVSS...
CVE-2020-23689
In YFCMF v2.3.1, there is a stored XSS vulnerability in the comments section of the news page...
YFCMF 跨站脚本漏洞
YFCMF is a software application. Provides a lightweight enterprise website management system. A cross-site scripting vulnerability exists in YFCMF version v2.3.1, which originates in the comments section of the news page...
YFCMF 安全漏洞
YFCMF is Hunan Renren Technology Co., Ltd. developed a set of back-end content management framework based on ThinkPHP5.1. + foreign ACE1.40 UI template. A remote command execution vulnerability exists in YFCMF v2.3.1. An attacker can exploit this vulnerability by sending a constructed POST messag...
File Upload Vulnerability in YFCMF Im***.p*** Page
YFCMF is a backend content management framework using ThinkPHP 5.1. + foreign ACE 1.40 UI template. A file upload vulnerability exists in the YFCMF Im.p page, which can be exploited by an attacker to gain server privileges...
CVE-2018-16431
admin/admin/adminsave.html in YFCMF v3.0 allows CSRF to add an administrator account...
CVE-2018-16431
admin/admin/adminsave.html in YFCMF v3.0 allows CSRF to add an administrator account...