CVE-2025-9398 | YiFang CMS up to 2.0.5 Migrate.php exportInstallTable information disclosure (EUVD-2025-25652)

A vulnerability has been found in YiFang CMS up to 2.0.5 and classified as problematic. Affected by this vulnerability is the function exportInstallTable of the file app/utils/base/database/Migrate.php. The manipulation leads to information disclosure.

This vulnerability is listed as CVE-2025-9398. The attack may be initiated remotely. In addition, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.