Vulnerabilities
3 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2020-23691 +1 in the same advisory: …23689 | YFCMF v2.3.1 has a Remote Command Execution (RCE) vulnerability in the index.php. YFCMF v2.3.1 has a Remote Command Execution (RCE) vulnerability in the index.php. NVD description · AI analysis pending | 9.8 group max | 3% | PoC |
| — | |
| CVE-2018-16431 | admin/admin/adminsave.html in YFCMF v3.0 allows CSRF to add an administrator account. admin/admin/adminsave.html in YFCMF v3.0 allows CSRF to add an administrator account. NVD description · AI analysis pending | 8.8 | <1% | PoC |
| — |