Soumettre #657903: YiFang YiFang CMS V2.0.0 Arbitrary File Upload

YiFang CMS has a arbitrary file upload vulnerability in the webUploader method of app/app/controller/File.php, where attackers can upload webshells to gain server privileges。

**You can download the product source code in https://gitee.com/wanglongcn/yifang.
You can download the product source code in https://gitee.com/wanglongcn/yifang.
You can download the product source code in https://gitee.com/wanglongcn/yifang.**

• La source: ⚠️ https://github.com/electroN1chahaha/YifangCMS-V2.0.0-Remote-Code-Execution-RCE-/issues/1
• Utilisateur: electroN1c (UID 85481)
• Soumission: 18/09/2025 08:15 (il y a 1 Année)
• Modérer: 28/09/2025 17:47 (10 days later)
• Statut: Accepté
• Entrée VulDB: 326213 [YiFang CMS jusqu’à 2.0.2 Backend File.php webUploader uploadpath élévation de privilèges]
• Points: 20