Filtered by vendor Iuok Subscriptions
Filtered by product Yfcmf-tp6 Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-3056 1 Iuok 1 Yfcmf-tp6 2025-01-08 4.3 Medium
A vulnerability was found in YFCMF up to 3.0.4. It has been declared as problematic. This vulnerability affects unknown code of the file index.php. The manipulation leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-230542 is the identifier assigned to this vulnerability.
CVE-2023-3057 1 Iuok 1 Yfcmf-tp6 2024-11-21 4.3 Medium
A vulnerability was found in YFCMF up to 3.0.4. It has been rated as problematic. This issue affects some unknown processing of the file app/admin/controller/Ajax.php. The manipulation of the argument controllername leads to path traversal: '../filedir'. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-230543.