Listen to this Post
The vulnerability exists in the `exportInstallTable` function within the `/app/utils/base/database/Migrate.php` file of YiFang CMS versions up to and including 2.0.5. This function is responsible for exporting database table structures, potentially for installation or migration purposes. The flaw is improper access control, as the function does not validate or restrict which users can invoke it. An unauthenticated remote attacker can send a direct HTTP request to the endpoint that triggers this function. Successful exploitation causes the application to return sensitive information, which is likely the structure or details of the database tables. This data exposure falls under CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor). The attack complexity is low, requires no privileges or user interaction, and can be performed over the network. A public proof-of-concept exploit is available, increasing the immediate risk for unpatched systems.
DailyCVE Form:
Platform: YiFang CMS
Version: Up to 2.0.5
Vulnerability: Information Disclosure
Severity: Medium
Date: 2025-08-24
Prediction: No patch expected
What Undercode Say:
Analytics:
Google Dork: `inurl:app/utils/base/database/Migrate.php`
Check Local File: `cat app/utils/base/database/Migrate.php | grep -n “exportInstallTable”`
Test Vulnerability: `curl -k -X POST “https://
How Exploit:
- Attacker identifies a target running YiFang CMS ≤ v2.0.5.
- Attacker locates the vulnerable endpoint (e.g., related to migration or database utility).
- Attacker sends a crafted HTTP request triggering the `exportInstallTable` function.
- The application executes the function without checking user permissions.
- The server response contains unauthorized database schema or configuration information.
Protection from this CVE:
No Official Patch: The vendor did not respond to disclosure.
Immediate Workaround: Disable or restrict access to the `Migrate.php` file via web server rules (e.g., .htaccess, nginx.conf).
Recommended Action: Replace YiFang CMS with an alternative, actively maintained product.
Network Control: Ensure the CMS admin panel is not exposed to the internet.
Impact:
Confidentiality Loss: Unauthorized access to database table names and structures.
Information Gathering: Leaked data can facilitate further, more severe attacks.
Low Integrity/Availability Impact: The vulnerability does not directly allow data modification or cause service disruption.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
