Description
YCCMS 存在远程代码执行漏洞。该漏洞是由于应用对用户请求中参数a的值验证不当导致的。
YCCMS Factory远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://zhuanlan.zhihu.com/p/717641991
https://www.cnblogs.com/anquankeyinyang/articles/15519326.html
https://txluck.github.io/2021/10/26/yccms%E5%AE%A1%E8%AE%A1/
https://cn-sec.com/archives/1720673.html
https://www.techug.com/post/php-file_exists-problem/