Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2018-13025

protected/apps/admin/controller/photoController.php in YXcms 1.4.7 allows remote attackers to delete arbitrary files via the index.php?r=admin/photo/delpic picname parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 49.7%
CVSS Severity
CVSS v3 Score 4.9
CVSS v2 Score 5.5
Products affected by CVE-2018-13025
  • Yxcms » Yxcms » Version: 1.4.7
    cpe:2.3:a:yxcms:yxcms:1.4.7


Products
Pricing
Contact Us

Shodan ® - All rights reserved