CVE-2026-75417
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
A SQL injection vulnerability in YzmCMS 7.5 occurs in the get_arrchildid() function in category.class.php. The parentid parameter is directly concatenated into a FIND_IN_SET() SQL clause without proper sanitization, allowing an authenticated administrator to execute arbitrary SQL queries via boolean-based blind injection.
Risk Assessment
An attacking administrator can gain full access to the database, potentially leading to data theft, modification, or complete system compromise.
Recommendation
Immediately update YzmCMS to the latest version and use prepared statements or parameterized queries instead of directly concatenating user input into SQL queries.
Original NVD description (English source)
A SQL injection vulnerability was found in YzmCMS 7.5. The issue occurs in the get_arrchildid() function within application/admin/controller/category.class.php, where the user-controlled parentid parameter is concatenated directly into a FIND_IN_SET() SQL clause without proper sanitization. This allows an authenticated administrator to execute arbitrary SQL queries via boolean-based blind injection, potentially leading to full database compromise.