Vulnerabilities (CVE)

Filtered by vendor Iuok Subscribe
Filtered by product Yfcmf-tp6
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-3057 1 Iuok 1 Yfcmf-tp6 2024-11-21 4.0 MEDIUM 4.3 MEDIUM
A vulnerability was found in YFCMF up to 3.0.4. It has been rated as problematic. This issue affects some unknown processing of the file app/admin/controller/Ajax.php. The manipulation of the argument controllername leads to path traversal: '../filedir'. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-230543.
CVE-2023-3056 1 Iuok 1 Yfcmf-tp6 2024-11-21 4.0 MEDIUM 4.3 MEDIUM
A vulnerability was found in YFCMF up to 3.0.4. It has been declared as problematic. This vulnerability affects unknown code of the file index.php. The manipulation leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-230542 is the identifier assigned to this vulnerability.