Code Execution Vulnerability in YxtCMF Online Learning System v6.1

YxtCMF online learning system is an online learning platform system developed with thinkphp+bootstrap as the framework. YxtCMF Online Learning System v6.1 has a code execution vulnerability that can be exploited by attackers to execute arbitrary code...

Arbitrary file download vulnerability in the downmaterial function on the YxtCMF CourseController.class.ph page

YxtCMF Yi Xue Tang Online Learning System is an online learning platform system developed with thinkphp+bootstrap as the framework. An arbitrary file download vulnerability exists in the YxtCMF CourseController.class.ph page downmaterial function. Allows an attacker to exploit the vulnerability t...