Cpe:2.3:a:yishaadmin:yishaadmin:3.1:*:*:*:*:*:*:*

YiShaAdmin versions 2.2 through 3.1 contain an unauthenticated path traversal vulnerability in the DownloadFile endpoint, allowing attackers to read or delete arbitrary files via manipulated parameters.