File upload vulnerability in yiqiCMS (CNVD-2020-75031)

yiqiCMS is a CMS system, the product is used for enterprise building. A file upload vulnerability exists in yiqiCMS, which can be exploited by an attacker to gain control of the server...

yiqicms system delete_file.php has arbitrary file deletion vulnerability

Yiqicms is the first marketing enterprise website system completely based on SEO-friendly development, using PHP+Mysql open source building system. Yiqicms 1.8 version of the background there are arbitrary file deletion vulnerability , because the program does not limit the deletion of directorie...