Browse CVEs

HIGH 8.8 CVE-2022-44387 EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Basic Information component under the Edit Member modul… Eyoucms Mitigation only Fix from $1,9502022-11-14 MEDIUM 6.5 CVE-2022-44389 EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Edit Admin Profile module. This vulnerability allows at… Eyoucms Mitigation only Fix from $1,6002022-11-14 MEDIUM 5.4 CVE-2022-44390 A cross-site scripting (XSS) vulnerability in EyouCMS V1.5.9-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload… Eyoucms Mitigation only Fix from $1,6002022-11-14 HIGH 8.8 CVE-2022-43323 EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Top Up Balance component under the Edit Member module. Eyoucms No fix yet Fix from $1,9502022-11-14 HIGH 8.8 CVE-2022-41500 EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery (CSRF) vulnerabilities via the Members Center, Editorial Membership, and… Eyoucms No fix yet Fix from $1,9502022-10-18 HIGH 8.8 CVE-2022-36225 EyouCMS V1.5.8-UTF8-SP1 is vulnerable to Cross Site Request Forgery (CSRF) via the background, column management function and add. Eyoucms No fix yet Fix from $1,9502022-08-19 MEDIUM 5.4 CVE-2022-35509 An issue was discovered in EyouCMS 1.5.8. There is a Storage XSS vulnerability that can allows an attacker to execute arbitrary Web scripts or HTML b… Eyoucms No fix yet Fix from $1,6002022-08-10 CRITICAL 9.8 CVE-2022-26273 EyouCMS v1.5.4 was discovered to lack parameter filtering in \user\controller\shop.php, leading to payment logic vulnerabilities. Eyoucms Mitigation only Fix from $2,3002022-03-28 CRITICAL 9.8 CVE-2022-26279 EyouCMS v1.5.5 was discovered to have no access control in the component /data/sqldata. Eyoucms No fix yet Fix from $2,3002022-03-24 HIGH 7.2 CVE-2021-42194 The wechat_return function in /controller/Index.php of EyouCms V1.5.4-UTF8-SP3 passes the user's input directly into the simplexml_ load_ String func… Eyoucms No fix yet Fix from $1,9502022-03-20 HIGH 8.1 CVE-2021-46255 eyouCMS V1.5.5-UTF8-SP3_1 suffers from Arbitrary file deletion due to insufficient filtering of the parameter filename. Eyoucms No fix yet Fix from $1,9502022-01-14 CRITICAL 9.8 CVE-2020-24000 SQL Injection vulnerability in eyoucms cms v1.4.7, allows attackers to execute arbitrary code and disclose sensitive information, via the tid paramet… Eyoucms No fix yet Fix from $2,3002021-11-03 HIGH 7.5 CVE-2021-39500 Eyoucms 1.5.4 is vulnerable to Directory Traversal. Due to a lack of input data sanitizaton in param tpldir, filename, type, nid an attacker can inje… Eyoucms Mitigation only Fix from $1,9502021-09-07 MEDIUM 6.1 CVE-2021-39501 EyouCMS 1.5.4 is vulnerable to Open Redirect. An attacker can redirect a user to a malicious url via the Logout function. Eyoucms No fix yet Fix from $1,6002021-09-07 CRITICAL 9.8 CVE-2021-39497 eyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject a url to trigger blind SSRF via the saveRemote() function. Eyoucms No fix yet Fix from $2,3002021-09-07 MEDIUM 6.1 CVE-2021-39499 A Cross-site scripting (XSS) vulnerability in Users in Qiong ICP EyouCMS 1.5.4 allows remote attackers to inject arbitrary web script or HTML via the… Eyoucms No fix yet Fix from $1,6002021-09-07 MEDIUM 5.4 CVE-2021-39496 Eyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject malicious code into `filename` param to trigger Reflected XSS. Eyoucms No fix yet Fix from $1,6002021-09-07 HIGH 8.8 CVE-2020-20642 Cross Site Request Forgery (CSRF) vulnerability exists in EyouCMS 1.3.6 that can add an htm page to execute the js code via login.php?m=admin&c=Filem… Eyoucms No fix yet Fix from $1,9502021-08-19 MEDIUM 5.4 CVE-2020-20645 Cross Site Scripting (XSS) vulnerability exists in EyouCMS1.3.6 in the basic_information area. Eyoucms No fix yet Fix from $1,6002021-08-19 HIGH 8.8 CVE-2020-19669 Cross Site Request Forgery (CSRF) vulnerability exists in Eyoucms 1.3.6 that can add an admin account via /login.php?m=admin&c=Admin&a=admin_add&lang… Eyoucms No fix yet Fix from $1,9502021-08-18 MEDIUM 5.4 CVE-2020-21929 A stored cross site scripting (XSS) vulnerability in the web_copyright field of Eyoucms v1.4.1 allows authenticated attackers to execute arbitrary we… Eyoucms No fix yet Fix from $1,6002021-08-10 MEDIUM 5.4 CVE-2020-21930 A stored cross site scripting (XSS) vulnerability in the web_attr_2 field of Eyoucms v1.4.1 allows authenticated attackers to execute arbitrary web s… Eyoucms No fix yet Fix from $1,6002021-08-10 HIGH 8.8 CVE-2020-18129 A CSRF vulnerability in Eyoucms v1.2.7 allows an attacker to add an admin account via login.php. Eyoucms No fix yet Fix from $1,9502020-10-22