EUVD-2024-49838

Malicious code in bioql PyPI...

CVE-2024-9293

A vulnerability classified as critical was found in skyselang yylAdmin up to 3.0. Affected by this vulnerability is the function list of the file /app/admin/controller/file/File.php of the component Backend. The manipulation of the argument isdisable leads to sql injection. The attack can be...

CVE-2024-9293

A vulnerability classified as critical was found in skyselang yylAdmin up to 3.0. Affected by this vulnerability is the function list of the file /app/admin/controller/file/File.php of the component Backend. The manipulation of the argument isdisable leads to sql injection. The attack can be...

CVE-2024-9293

A vulnerability classified as critical was found in skyselang yylAdmin up to 3.0. Affected by this vulnerability is the function list of the file /app/admin/controller/file/File.php of the component Backend. The manipulation of the argument isdisable leads to sql injection. The attack can be...

CVE-2024-9293 skyselang yylAdmin Backend File.php list sql injection

A vulnerability classified as critical was found in skyselang yylAdmin up to 3.0. Affected by this vulnerability is the function list of the file /app/admin/controller/file/File.php of the component Backend. The manipulation of the argument isdisable leads to sql injection. The attack can be...

CVE-2024-9293

CVE-2024-9293 affects skyselang yylAdmin up to version 3.0, targeting the Backend component. The vulnerability resides in the /app/admin/controller/file/File.php file’s list function, where manipulating the is_disable argument leads to SQL injection. It is exploitable remotely and is corroborated...

CVE-2024-9293 skyselang yylAdmin Backend File.php list sql injection

A vulnerability classified as critical was found in skyselang yylAdmin up to 3.0. Affected by this vulnerability is the function list of the file /app/admin/controller/file/File.php of the component Backend. The manipulation of the argument isdisable leads to sql injection. The attack can be...

yylAdmin SQL注入漏洞

yylAdmin is a minimalist backend management system based on ThinkPHP8 and Vue3 by skyselang individual developer. SQL injection vulnerability exists in yylAdmin 3.0 and earlier versions, the vulnerability stems from the parameter isdisable in the file /app/admin/controller/file/File.php which can...