CVE Intelligence

Mfscripts YetiShare File Hosting Script vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Mfscripts YetiShare File Hosting Script: 1 record(s), with affected versions and fixes.

CVE-2021-47899 Medium · 4.0 CWE-434 Jan 23, 2026
YetiShare File Hosting Script 5.1.0 Remote File Upload SSRF Vulnerability
YetiShare File Hosting Script 5.1.0 contains a server-side request forgery vulnerability that allows attackers to read local system files through the remote file upload feature. Attackers can exploit the url parameter in the url_upload_handler endpoint to access sensitive files like /etc/passwd by using file:/// protocol.