2 matches found
Sql injection
\application\admin\controller\updateurls.class.php in YzmCMS 3.6 has SQL Injection via the catids array parameter to admin/updateurls/updatecategoryurl.html...
6.5CVSS7.4AI score0.00966EPSS
SaveExploits1References1Affected Software1
CVE-2018-7579: Improper Neutralization of Special Elements used in an SQL Command
\application\admin\controller\updateurls.class.php in YzmCMS 3.6 has SQL Injection via the catids array parameter to admin/updateurls/updatecategoryurl.html...
7.2CVSS7.2AI score0.00966EPSS
SaveExploits1References2
20