← All advisories

Critical severity9.8NVD Advisory· Published Jan 27, 2025· Updated Jun 17, 2026

CVE-2024-57052

CVE-2024-57052

Description

An issue in youdiancms v.9.5.20 and before allows a remote attacker to escalate privileges via the sessionID parameter in the index.php file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

YouDianCMS/YouDianCMSllm-fuzzy3 versions
<=9.5.20+ 2 more
- (no CPE)range: <=9.5.20
- (no CPE)
- cpe:2.3:a:youdiancms:youdiancms:*:*:*:*:*:*:*:*range: <=9.5.20

Patches

Vulnerability mechanics

References

1

gist.github.com/yahaha9/720fb45bbebda62dc198568c8d275df8nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.