← Back

Yfcmf Tp6

yfcmf-tp6

Vendor: Iuok • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-3057
1Iuok
1Yfcmf Tp6
Jun 17, 2026
Jun 2, 2023
N/A· v4
9.8 CRITICAL· v3
4.0 MEDIUM· v2
A vulnerability was found in YFCMF up to 3.0.4. It has been rated as problematic. This issue affects some unknown processing of the file app/admin/controller/Ajax.php. The manipulation of the argument controllername lead...Show more
A vulnerability was found in YFCMF up to 3.0.4. It has been rated as problematic. This issue affects some unknown processing of the file app/admin/controller/Ajax.php. The manipulation of the argument controllername leads to path traversal: '../filedir'. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-230543.Show less
CVE-2023-3056
1Iuok
1Yfcmf Tp6
Jun 17, 2026
Jun 2, 2023
N/A· v4
9.8 CRITICAL· v3
4.0 MEDIUM· v2
A vulnerability was found in YFCMF up to 3.0.4. It has been declared as problematic. This vulnerability affects unknown code of the file index.php. The manipulation leads to path traversal: '../filedir'. The attack can b...Show more
A vulnerability was found in YFCMF up to 3.0.4. It has been declared as problematic. This vulnerability affects unknown code of the file index.php. The manipulation leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-230542 is the identifier assigned to this vulnerability.Show less