high7.2
CVE-2018-7579
\application\admin\controller\update_urls.class.php in YzmCMS 3.6 has SQL Injection via the catids array parameter to admin/update_urls/update_category_url.htm…
Impact
\application\admin\controller\update_urls.class.php in YzmCMS 3.6 has SQL Injection via the catids array parameter to admin/update_urls/update_category_url.html.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yzmcms | Yzmcms | Version 3.6 |