An arbitrary file upload vulnerability in the plugin installation feature of YZNCMS v2.0.1 allows attackers to execute arbitrary code via uploading a crafted Zip file.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| http://yzncms.com | Not Applicable |
| https://gitee.com/ken678/YZNCMS | Product |
| https://github.com/Ka7arotto/YZNCMS/blob/main/yzncms-upload.md | Exploit |
Configurations
History
07 Apr 2025, 18:52
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Yzncms
Yzncms yzncms |
|
| CPE | cpe:2.3:a:yzncms:yzncms:2.0.1:*:*:*:*:*:*:* | |
| References | () http://yzncms.com - Not Applicable | |
| References | () https://gitee.com/ken678/YZNCMS - Product | |
| References | () https://github.com/Ka7arotto/YZNCMS/blob/main/yzncms-upload.md - Exploit |
26 Feb 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-26 15:15
Updated : 2025-04-07 18:52
NVD link : CVE-2025-25791
Mitre link : CVE-2025-25791
JSON object : View
Products Affected
yzncms
- yzncms
CWE
No CWE.