Wanglongcn Yifang
7 CVEs affecting Wanglongcn Yifang. Latest disclosed: 2025-09-29. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-45887 | Critical | 9.1 | 2025-05-09 | Yifang CMS v2.0.2 is vulnerable to Server-Side Request Forgery (SSRF) in /api/file/getRemoteContent. |
CVE-2025-9400 | Medium | 6.3 | 2025-08-25 | A flaw has been found in YiFang CMS up to 2.0.5. This affects the function mergeMultipartUpload of the file app/utils/base/plugin/P_file.php. This manipulation… |
CVE-2025-9399 | Medium | 6.3 | 2025-08-25 | A vulnerability was detected in YiFang CMS up to 2.0.5. Affected by this issue is some unknown functionality of the file app/logic/L_tool.php. The manipulation… |
CVE-2025-9398 | Medium | 5.3 | 2025-08-25 | A security vulnerability has been detected in YiFang CMS up to 2.0.5. Affected by this vulnerability is the function exportInstallTable of the file app/utils/b… |
CVE-2025-11136 | Medium | 4.7 | 2025-09-29 | A flaw has been found in YiFang CMS up to 2.0.2. The impacted element is the function webUploader of the file app/app/controller/File.php of the component Back… |
CVE-2025-5381 | Low | 2.7 | 2025-05-31 | A vulnerability, which was classified as problematic, was found in Yifang CMS up to 2.0.2. Affected is the function downloadFile of the file /api/File/download… |
CVE-2025-5383 | Low | 2.4 | 2025-05-31 | A vulnerability was found in Yifang CMS up to 2.0.2 and classified as problematic. Affected by this issue is some unknown functionality of the component Articl… |