CVE-2024-9293: Skyselang Yyladmin

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability classified as critical was found in skyselang yylAdmin up to 3.0. Affected by this vulnerability is the function list of the file /app/admin/controller/file/File.php of the component Backend. The manipulation of the argument is_disable leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

• Skyselang Yyladmin: up to and including 3.0

Published 2024-09-27. Last modified 2026-06-17.