Approved changes feed: RSS · Atom

cpe:2.3:a:yot:yot_cms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorYot (67d4906c-edfd-5ac0-a307-ce6918ab474a)
ProductYot Cms (bf05dead-41d7-5310-8de4-15338603620d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-25425 vulnerable 2026-06-08 05:11:29.893350 Yot CMS 3.3.1 SQL Injection via aid and cid Parameters
HIGH (8.2)
Yot CMS 3.3.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the aid and cid parameters. Attackers can send GET requests to index.php with crafted SQL payloads in the aid or cid parameters to extract database information including table and column names.
Published: 2026-05-30T14:55:28.708Z
Updated: 2026-06-01T14:59:53.066Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.