CVE-2018-8756

Eval injection in yzmphp/core/function/global.func.php in YzmCMS v3.7.1 allows remote attackers to achieve arbitrary code execution via PHP code in the POST…

published March 18, 2018

CVSS
—
EPSS
3%
Percentile
88.3
In the wild
Unconfirmed
What it is

Eval injection in yzmphp/core/function/global.func.php in YzmCMS v3.7.1 allows remote attackers to achieve arbitrary code execution via PHP code in the POST data of an index.php?m=member&c=member_content&a=init request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03280 · 88.3th percentile
Published
2018-03-18T06:00Z
EPSS history
Timeline
  • 18 MAR 06:00Z
    Eval injection in yzmphp/core/function/global.func.php in YzmCMS v3.7.1 allows remote attackers to achieve arbitrary code execution via PHP code in the POST…
    cvelistv5