critical9.8
CVE-2020-20289
Sql injection vulnerability in the yccms 3.3 project.
Impact
Sql injection vulnerability in the yccms 3.3 project. The no_top function's improper judgment of the request parameters, triggers a sql injection vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yccms | Yccms | Version 3.3 |