Vulnerabilidades em YiFang
13 resultadosAnálise Vexday
YiFang apresenta um perfil de risco controlado com 10 vulnerabilidades catalogadas, nenhuma em exploração ativa (KEV) e nenhuma crítica identificada. A fraqueza dominante é Cross-Site Scripting (CWE-79), tipicamente de médio impacto, sem vulnerabilidades publicadas nos últimos 90 dias, indicando um cenário de risco estável e não emergente.
CVE-2025-5381MEDIUMYifang CMS Admin Panel downloadFile path traversalEPSS 0.6%CVE-2025-9398MEDIUMYiFang CMS Migrate.php exportInstallTable information disclosureEPSS 0.5%CVE-2025-11136MEDIUMYiFang CMS Backend File.php webUploader unrestricted uploadEPSS 0.4%CVE-2025-9399MEDIUMYiFang CMS L_tool.php sql injectionEPSS 0.3%CVE-2025-9400MEDIUMYiFang CMS P_file.php mergeMultipartUpload unrestricted uploadEPSS 0.3%CVE-2026-2934MEDIUMYiFang CMS Extended Management D_friendLinkGroup.php update cross site scriptingEPSS 0.3%CVE-2026-6633MEDIUMYifang CMS Extended Management L_rbac_admin.php store cross site scriptingEPSS 0.3%CVE-2025-5383MEDIUMYifang CMS Article Management Module cross site scriptingEPSS 0.2%CVE-2026-2932MEDIUMYiFang CMS Extended Management D_adPosition.php update cross site scriptingEPSS 0.2%CVE-2026-2933MEDIUMYiFang CMS Extended Management D_adManage.php update cross site scriptingEPSS 0.2%CVE-2026-3743MEDIUMYiFang CMS D_singlePageGroup.php update cross site scriptingEPSS 0.2%CVE-2026-3741MEDIUMYiFang CMS D_friendLink.php update cross site scriptingEPSS 0.2%CVE-2026-3742MEDIUMYiFang CMS D_singlePage.php update cross site scriptingEPSS 0.2%