CVE-2018-7479

YzmCMS 3.6 allows remote attackers to discover the full path via a direct request to application/install/templates/s1.php...

YzmCMS Information Leakage Vulnerability

YzmCMS is a lightweight open source content management system based on PHP+Mysql architecture developed by Yuan Zhimeng alone. YzmCMS 3.6 suffers from an information disclosure vulnerability. A remote attacker can exploit this vulnerability by making a direct request to...

CVE-2018-7479: Exposure of Resource to Wrong Sphere

YzmCMS 3.6 allows remote attackers to discover the full path via a direct request to application/install/templates/s1.php...