CVE-2026-3743

all versions

A flaw has been found in YiFang CMS 2.0.5. This affects the function update of the file app/db/admin/D_singlePageGroup.php. Execut

3.5LOW

CVE-2026-3742

all versions

A vulnerability was detected in YiFang CMS 2.0.5. The impacted element is the function update of the file app/db/admin/D_singlePag

3.5LOW

CVE-2026-3741

all versions

A security vulnerability has been detected in YiFang CMS 2.0.5. The affected element is the function update of the file app/db/adm

3.5LOW

CVE-2026-2934

<= 2.0.5

A security vulnerability has been detected in YiFang CMS up to 2.0.5. This impacts the function update of the file app/db/admin/D_

2.4LOW

CVE-2026-2933

<= 2.0.5

A weakness has been identified in YiFang CMS up to 2.0.5. This affects the function update of the file app/db/admin/D_adManage.php

2.4LOW

CVE-2026-2932

<= 2.0.5

A security flaw has been discovered in YiFang CMS up to 2.0.5. The impacted element is the function update of the file app/db/admi

2.4LOW

CVE-2025-11136

<= 2.0.2

A flaw has been found in YiFang CMS up to 2.0.2. The impacted element is the function webUploader of the file app/app/controller/F

4.7MEDIUM

CVE-2025-9400

<= 2.0.5

A flaw has been found in YiFang CMS up to 2.0.5. This affects the function mergeMultipartUpload of the file app/utils/base/plugin/

6.3MEDIUM

CVE-2025-9399

<= 2.0.5

A vulnerability was detected in YiFang CMS up to 2.0.5. Affected by this issue is some unknown functionality of the file app/logic

6.3MEDIUM

CVE-2025-9398

<= 2.0.5

A security vulnerability has been detected in YiFang CMS up to 2.0.5. Affected by this vulnerability is the function exportInstall

5.3MEDIUM

CVE-2025-5383

<= 2.0.2

A vulnerability was found in Yifang CMS up to 2.0.2 and classified as problematic. Affected by this issue is some unknown function

2.4LOW

CVE-2025-5381

<= 2.0.2

A vulnerability, which was classified as problematic, was found in Yifang CMS up to 2.0.2. Affected is the function downloadFile o

2.7LOW

CVE-2025-45887

all versions

Yifang CMS v2.0.2 is vulnerable to Server-Side Request Forgery (SSRF) in /api/file/getRemoteContent.

9.1CRITICAL