CVE-2018-7579

\application\admin\controller\updateurls.class.php in YzmCMS 3.6 has SQL Injection via the catids array parameter to admin/updateurls/updatecategoryurl.html...

PT-2018-18163

Name of the Vulnerable Software and Affected Versions YzmCMS version 3.6 Description The issue concerns SQL Injection in YzmCMS. Specifically, it occurs via the catids array parameter to the "admin/update urls/update category url.html" endpoint. Recommendations For YzmCMS version 3.6, consider...