CVE-2023-3057

CRITICO 9.8CVE-2023-3057 · Published 02/06/2023 · updated 17/06/2026

In breve

CVE-2023-3057 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda yfcmf-tp6 (iuok).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.2%, superiore al 68.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
yfcmf-tp6 iuok	`≤ 3.0.4`	No fix yet

Description

A vulnerability was found in YFCMF up to 3.0.4. It has been rated as problematic. This issue affects some unknown processing of the file app/admin/controller/Ajax.php. The manipulation of the argument controllername leads to path traversal: '../filedir'. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-230543.

References

HuBenLab/HuBenVulList · Exploit
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Altre vulnerabilità di yfcmf-tp6

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free