YzmCMS v7.5 Pre-Auth SQL Injection in Install Module via siteurl (RCE Path)

github.com 2026-07-02查看中文 →

Security AdvisoryCriticalYzmCMS

Affected:

YzmCMS v7.5

Referenced CVEs: CVE-2026-13529 · 5.6

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Perl Regex Alternation Pattern Matching Regression Fix 2026-08-14 Reflected XSS fix in markdownToHTML function with PoC code 2026-08-14 Perl Regex AMDCORASICK Logic Flaw Fix 2026-08-14 Saurus CMS Community Edition Patch: Fixes Response Splitting, File Inclusion, and Reflected XSS Vulnerabilities 2026-08-14 CMS db_data.php SQL Injection via SHOW TABLES (CWE-89) 2026-08-14

Offline Archive

Offline screenshot & PDF are Pro-exclusive