Vulnerabilities (CVE)

Filtered by vendor Yunyou Cms Project Subscribe
Filtered by product Yunyou Cms
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-0648 1 Yunyou Cms Project 1 Yunyou Cms 2024-11-21 7.5 HIGH 7.3 HIGH
A vulnerability has been found in Yunyou CMS up to 2.2.6 and classified as critical. This vulnerability affects unknown code of the file /app/index/controller/Common.php. The manipulation of the argument templateFile leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251374 is the identifier assigned to this vulnerability.