cve/2018/CVE-2018-8756.md
2024-05-26 14:27:05 +02:00

670 B

CVE-2018-8756

Description

Eval injection in yzmphp/core/function/global.func.php in YzmCMS v3.7.1 allows remote attackers to achieve arbitrary code execution via PHP code in the POST data of an index.php?m=member&c=member_content&a=init request.

POC

Reference

No PoCs from references.

Github