zhaoheng521/yxcms

Releases0

Stars1

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2018-13025 ↗	Jun 29, 2018Friday, 29 June 2018, 17:29	—	5.5 MEDIUM
protected/apps/admin/controller/photoController.php in YXcms 1.4.7 allows remote attackers to delete arbitrary files via the index.php?r=admin/photo/delpic picname parameter.