CVE-2023-3057

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in YFCMF up to 3.0.4. It has been rated as problematic. This issue affects some unknown processing of the file app/admin/controller/Ajax.php. The manipulation of the argument controllername leads to path traversal: '../filedir'. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-230543.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-24

Affected software

Vendor	Product	Versions
n/a	YFCMF	3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4

References

https://github.com/HuBenLab/HuBenVulList/blob/main/YFCMF-TP6-3.0.4%20has%20a%20Remote%20Command%20Execution%20(RCE)%20vulnerability%202.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.230543Third Party Advisory
https://vuldb.com/?id.230543Third Party Advisory
https://github.com/HuBenLab/HuBenVulList/blob/main/YFCMF-TP6-3.0.4%20has%20a%20Remote%20Command%20Execution%20(RCE)%20vulnerability%202.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.230543Third Party Advisory
https://vuldb.com/?id.230543Third Party Advisory

Timeline

Published: Jun 2, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-305707.5pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via unauthenticated IKEv1 Aggressive CVE-2023-305715.3Libarchive through 3.6.2 can cause directories to have world-writable permissions. The umask() call inside archive_write_disk_posix.c change CVE-2023-305757.5Apache Guacamole 1.5.1 and older may incorrectly calculate the lengths of instruction elements sent during the Guacamole protocol handshake,CVE-2023-305768.1Apache Guacamole 0.9.10 through 1.5.1 may continue to reference a freed RDP audio input buffer. Depending on timing, this may allow an attac CVE-2023-305777.8AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument checking for runtar.c, a different CVE-2023-30585.4A vulnerability was found in 07FLY CRM up to 1.2.0. It has been declared as problematic. This vulnerability affects unknown code of the comp CVE-2023-305817.5The use of __proto__ in process.mainModule.__proto__.require() can bypass the policy mechanism and require modules outside of the policy.jso CVE-2023-305825.3A vulnerability has been identified in Node.js version 20, affecting users of the experimental permission model when the --allow-fs-read fla CVE-2023-305837.5fs.openAsBlob() can bypass the experimental permission model when using the file system read restriction with the `--allow-fs-read` flag in CVE-2023-305847.7A vulnerability has been discovered in Node.js version 20, specifically within the experimental permission model. This flaw relates to impro CVE-2023-305857.5A vulnerability has been identified in the Node.js (.msi version) installation process, specifically affecting Windows users who install Nod CVE-2023-305867.5A privilege escalation vulnerability exists in Node.js 20 that allowed loading arbitrary OpenSSL engines when the experimental permission mo