CVE-2023-3056

A vulnerability was found in YFCMF up to 3.0.4. It has been declared as problematic. This vulnerability affects unknown code of the file index.php. The manipulation leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-230542 is the identifier assigned to this vulnerability.

• CWE-24

• https://github.com/HuBenLab/HuBenVulList/blob/main/YFCMF-TP6-3.0.4%20has%20a%20Remote%20Command%20Execution%20(RCE)%20vulnerability%201.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.230542Third Party Advisory
• https://vuldb.com/?id.230542Third Party Advisory
• https://github.com/HuBenLab/HuBenVulList/blob/main/YFCMF-TP6-3.0.4%20has%20a%20Remote%20Command%20Execution%20(RCE)%20vulnerability%201.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.230542Third Party Advisory
• https://vuldb.com/?id.230542Third Party Advisory

Published

Jun 2, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-30554Archery is an open source SQL audit platform. The Archery pr…6.5
• CVE-2023-30555Archery is an open source SQL audit platform. The Archery pr…6.5
• CVE-2023-30556Archery is an open source SQL audit platform. The Archery pr…6.5
• CVE-2023-30557Archery is an open source SQL audit platform. The Archery pr…6.5
• CVE-2023-30558Archery is an open source SQL audit platform. The Archery pr…6.5
• CVE-2023-30559The firmware update package for the wireless card is not pro…5.7
• CVE-2023-30560The configuration from the PCU can be modified without authe…6.8
• CVE-2023-30561The data flowing between the PCU and its modules is insecure…6.1
• CVE-2023-30562A GRE dataset file within Systems Manager can be tampered wi…6.7
• CVE-2023-30563A malicious file could be uploaded into a System Manager Use…8.2
• CVE-2023-30564Alaris Systems Manager does not perform input validation dur…6.9
• CVE-2023-30565An insecure connection between Systems Manager and CQI Repor…3.5