CVE-2024-0648

CRITICO 9.8CVE-2024-0648 · Published 17/01/2024 · updated 17/06/2026

In breve

CVE-2024-0648 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda yunyou cms (yunyou cms project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.67%, superiore al 52.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
yunyou cms yunyou_cms_project	`≤ 2.2.6`	No fix yet

Description

A vulnerability has been found in Yunyou CMS up to 2.2.6 and classified as critical. This vulnerability affects unknown code of the file /app/index/controller/Common.php. The manipulation of the argument templateFile leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251374 is the identifier assigned to this vulnerability.

References

note.zhaoj.in/share/FO8AL78oAeTS · Broken Link
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free