Description
\application\admin\controller\update_urls.class.php in YzmCMS 3.6 has SQL Injection via the catids array parameter to admin/update_urls/update_category_url.html.
Unscored
CVE-2018-7579
EUVD-2018-19300GHSA-x2fr-xv4q-c9pg
\application\admin\controller\update_urls.class.php in YzmCMS 3.6 has SQL Injection via the catids array parameter to admin/update_urls/upd…
Published Mar 1, 2018 · Updated Aug 5, 2024 · Assigned by mitre