CVE-2024-9293

CVE-2024-9293 affects skyselang yylAdmin up to version 3.0, targeting the Backend component. The vulnerability resides in the /app/admin/controller/file/File.php file’s list function, where manipulating the is_disable argument leads to SQL injection. It is exploitable remotely and is corroborated...