TI-2025-08611 CVE-2025-9399 · GHSA-x9w6-w79w-w3r4
YiFang CMS L_tool.php sql injection
Priority HIGH 65
A vulnerability was detected in YiFang CMS up to 2.0.5.
YiFang
Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
YiFang records in CISA KEVNo YiFang vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
13 records
TI-2025-08610 CVE-2025-9398 · GHSA-r52m-38gf-wxcc
YiFang CMS Migrate.php exportInstallTable information disclosure
Priority MEDIUM 64
A security vulnerability has been detected in YiFang CMS up to 2.0.5.
TI-2025-08612 CVE-2025-9400 · GHSA-5q3f-j5cg-9xmv
YiFang CMS P_file.php mergeMultipartUpload unrestricted upload
Priority MEDIUM 57
A flaw has been found in YiFang CMS up to 2.0.5.
TI-2026-05820 CVE-2026-6633 · GHSA-7gjf-f5f3-qqxw
Yifang CMS Extended Management L_rbac_admin.php store cross site scripting
Priority MEDIUM 56
A security flaw has been discovered in Yifang CMS up to 2.0.5.
TI-2026-03233 CVE-2026-3743 · GHSA-v8m9-5jwp-92pf
YiFang CMS D_singlePageGroup.php update cross site scripting
Priority MEDIUM 56
A flaw has been found in YiFang CMS 2.0.5.
TI-2026-03232 CVE-2026-3742 · GHSA-pwcm-mpvj-rqx4
YiFang CMS D_singlePage.php update cross site scripting
Priority MEDIUM 56
A vulnerability was detected in YiFang CMS 2.0.5.
TI-2026-03231 CVE-2026-3741 · GHSA-2mx9-mg2h-r94x
YiFang CMS D_friendLink.php update cross site scripting
Priority MEDIUM 56
A security vulnerability has been detected in YiFang CMS 2.0.5.
TI-2025-10204 CVE-2025-11136 · GHSA-32xq-c7f5-x98h
YiFang CMS Backend File.php webUploader unrestricted upload
Priority MEDIUM 56
A flaw has been found in YiFang CMS up to 2.0.2.
TI-2025-04833 CVE-2025-5381 · GHSA-cw9c-84f2-568f
Yifang CMS Admin Panel downloadFile path traversal
Priority MEDIUM 56
A vulnerability, which was classified as problematic, was found in Yifang CMS up to 2.0.2.
TI-2026-02527 CVE-2026-2934 · GHSA-786c-jm2j-j6xw
YiFang CMS Extended Management D_friendLinkGroup.php update cross site scripting
Priority MEDIUM 55
A security vulnerability has been detected in YiFang CMS up to 2.0.5.
TI-2025-04835 CVE-2025-5383 · GHSA-w76q-396p-2mrw
Yifang CMS Article Management Module cross site scripting
Priority MEDIUM 55
A vulnerability was found in Yifang CMS up to 2.0.2 and classified as problematic.
TI-2026-02526 CVE-2026-2933 · GHSA-3jg4-mfj9-3m8j
YiFang CMS Extended Management D_adManage.php update cross site scripting
Priority LOW 22
A weakness has been identified in YiFang CMS up to 2.0.5.
TI-2026-02525 CVE-2026-2932 · GHSA-rm9x-gmj8-vfxh
YiFang CMS Extended Management D_adPosition.php update cross site scripting
Priority LOW 22
A security flaw has been discovered in YiFang CMS up to 2.0.5.