← Back to CVE List

CVE-2018-7579

Published: 2018-03-01T19:29Z
Last Modified: 2024-11-21T04:12Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
\application\admin\controller\update_urls.class.php in YzmCMS 3.6 has SQL Injection via the catids array parameter to admin/update_urls/update_category_url.html. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt