Security Advisory

CVE-2024-9293

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-09-27 21:00:15

Last updated 2024-09-30 16:28:34

Assigner VulDB

State PUBLISHED

Description

A vulnerability classified as critical was found in skyselang yylAdmin up to 3.0. Affected by this vulnerability is the function list of the file /app/admin/controller/file/File.php of the component Backend. The manipulation of the argument is_disable leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

← Browse all CVEs View on cve.org ↗