CyberSecBulletin

YFCMF vulnerabilities

We track 2 vulnerabilities in YFCMF products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 2, 2023.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest YFCMF vulnerabilities

  • 9.8 Critical severity

    YFCMF: Path Traversal: '../filedir'

    CVE-2023-3057YFCMFEPSS 1.21%

    A vulnerability was found in YFCMF up to 3.0.4. It has been rated as problematic. This issue affects some unknown processing of the file app/admin/controller/Ajax.php. The manipulation of the argument controllername leads to path traversal: '../filedir'. The a

  • 9.8 Critical severity

    YFCMF: Path Traversal: '../filedir'

    CVE-2023-3056YFCMFEPSS 1.21%

    A vulnerability was found in YFCMF up to 3.0.4. It has been declared as problematic. This vulnerability affects unknown code of the file index.php. The manipulation leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has be