Read the docs

Ycf1998

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Ycf1998 records in CISA KEV

No Ycf1998 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Money-pos 1 record HIGH

Records

1 record

TI-2025-39418 CVE-2025-63689 · GHSA-3xhw-hf92-cgv2

Multiple SQL injection vulnerabilitites in ycf1998 money-pos system before commit…

Priority HIGH 82

Multiple SQL injection vulnerabilitites in ycf1998 money-pos system before commit 11f276bd20a41f089298d804e43cb1c39d041e59 (2025-09-14) allows a remote attacker to execute arbitrary code via the orderby parameter

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0092 Published 2025-11-07 No fix listed CWE-89
Open these records in search →