CVE-2024-0648

creationtimestamp| type| source ---|---|--- 2024-01-18 00:31:16+00:00| seen| https://t.me/ctinow/169519 2024-02-10 18:17:08+00:00| seen| https://t.me/ctinow/182622...

CVE-2024-0648

CVE-2024-0648 affects Yunyou CMS up to 2.2.6. The vulnerability is in /app/index/controller/Common.php where manipulating the templateFile argument leads to unrestricted file upload. It is exploitable remotely; public exploit disclosed. No patch/version fix details are provided in the connected d...

CVE-2024-0648 Yunyou CMS Common.php unrestricted upload

A vulnerability has been found in Yunyou CMS up to 2.2.6 and classified as critical. This vulnerability affects unknown code of the file /app/index/controller/Common.php. The manipulation of the argument templateFile leads to unrestricted upload. The attack can be initiated remotely. The exploit...