TI-2025-08611 CVE-2025-9399 · GHSA-x9w6-w79w-w3r4
YiFang CMS L_tool.php sql injection
Priority HIGH 65
A vulnerability was detected in YiFang CMS up to 2.0.5.
wanglongcn
Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
wanglongcn records in CISA KEVNo wanglongcn vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records in Yifang · all components
TI-2025-08610 CVE-2025-9398 · GHSA-r52m-38gf-wxcc
YiFang CMS Migrate.php exportInstallTable information disclosure
Priority MEDIUM 64
A security vulnerability has been detected in YiFang CMS up to 2.0.5.
TI-2025-08612 CVE-2025-9400 · GHSA-5q3f-j5cg-9xmv
YiFang CMS P_file.php mergeMultipartUpload unrestricted upload
Priority MEDIUM 57
A flaw has been found in YiFang CMS up to 2.0.5.
TI-2025-10204 CVE-2025-11136 · GHSA-32xq-c7f5-x98h
YiFang CMS Backend File.php webUploader unrestricted upload
Priority MEDIUM 56
A flaw has been found in YiFang CMS up to 2.0.2.
TI-2025-04833 CVE-2025-5381 · GHSA-cw9c-84f2-568f
Yifang CMS Admin Panel downloadFile path traversal
Priority MEDIUM 56
A vulnerability, which was classified as problematic, was found in Yifang CMS up to 2.0.2.
TI-2025-04835 CVE-2025-5383 · GHSA-w76q-396p-2mrw
Yifang CMS Article Management Module cross site scripting
Priority MEDIUM 55
A vulnerability was found in Yifang CMS up to 2.0.2 and classified as problematic.
TI-2025-28891 CVE-2025-45887 · GHSA-px42-xr3h-wjv8
Yifang CMS v2.0.2 is vulnerable to Server-Side Request Forgery (SSRF) in /api/file/getRemoteContent.
Priority MEDIUM 48
Yifang CMS v2.0.2 is vulnerable to Server-Side Request Forgery (SSRF) in /api/file/getRemoteContent.