Browse CVEs

MEDIUM 6.1 CVE-2023-2057 A vulnerability was found in EyouCms 1.5.4. It has been classified as problematic. Affected is an unknown function of the file login.php?m=admin&c=Ar… Eyoucms No fix yet Fix from $1,6002023-04-14 MEDIUM 6.1 CVE-2023-2058 A vulnerability was found in EyouCms up to 1.6.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of … Eyoucms after 1.6.2 Fix from $1,6002023-04-14 MEDIUM 5.4 CVE-2023-1798 A vulnerability, which was classified as problematic, has been found in EyouCMS up to 1.5.4. Affected by this issue is some unknown functionality of … Eyoucms after 1.5.4 Fix from $1,6002023-04-02 MEDIUM 5.4 CVE-2023-1799 A vulnerability, which was classified as problematic, was found in EyouCMS up to 1.5.4. This affects an unknown part of the file login.php. The manip… Eyoucms after 1.5.4 Fix from $1,6002023-04-02 MEDIUM 5.4 CVE-2022-45755 Cross-site scripting (XSS) vulnerability in EyouCMS v1.6.0 allows attackers to execute arbitrary code via the home page description on the basic info… Eyoucms No fix yet Fix from $1,6002023-02-08 MEDIUM 6.1 CVE-2022-45537 EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENV_LIST_URL". Eyoucms after 1.6.0 Fix from $1,6002023-01-20 MEDIUM 6.1 CVE-2022-45538 EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENV_GOBACK_URL". Eyoucms after 1.6.0 Fix from $1,6002023-01-20 MEDIUM 6.1 CVE-2022-45539 EyouCMS <= 1.6.0 was discovered a reflected-XSS in FileManager component in GET value "activepath" when creating a new file. Eyoucms after 1.6.0 Fix from $1,6002023-01-20 MEDIUM 6.1 CVE-2022-45540 EyouCMS <= 1.6.0 was discovered a reflected-XSS in article type editor component in POST value "name" if the value contains a malformed UTF-8 char. Eyoucms after 1.6.0 Fix from $1,6002023-01-20 MEDIUM 6.1 CVE-2022-45541 EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article attribute editor component in POST value "value" if the value contains a non-integer c… Eyoucms after 1.6.0 Fix from $1,6002023-01-20 MEDIUM 5.4 CVE-2022-45542 EyouCMS <= 1.6.0 was discovered a reflected-XSS in the FileManager component in GET parameter "filename" when editing any file. Eyoucms after 1.6.0 Fix from $1,6002023-01-20 MEDIUM 5.4 CVE-2021-39428 Cross Site Scripting (XSS) vulnerability in Users.php in eyoucms 1.5.4 allows remote attackers to run arbitrary code and gain escalated privilege via… Eyoucms No fix yet Fix from $1,6002022-12-15 MEDIUM 5.4 CVE-2022-45280 A cross-site scripting (XSS) vulnerability in the Url parameter in /login.php of EyouCMS v1.6.0 allows attackers to execute arbitrary web scripts or … Eyoucms No fix yet Fix from $1,6002022-11-23 HIGH 8.8 CVE-2022-44387 EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Basic Information component under the Edit Member modul… Eyoucms Mitigation only Fix from $1,9502022-11-14 MEDIUM 6.5 CVE-2022-44389 EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Edit Admin Profile module. This vulnerability allows at… Eyoucms Mitigation only Fix from $1,6002022-11-14 MEDIUM 5.4 CVE-2022-44390 A cross-site scripting (XSS) vulnerability in EyouCMS V1.5.9-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload… Eyoucms Mitigation only Fix from $1,6002022-11-14 HIGH 8.8 CVE-2022-43323 EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Top Up Balance component under the Edit Member module. Eyoucms No fix yet Fix from $1,9502022-11-14 HIGH 8.8 CVE-2022-41500 EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery (CSRF) vulnerabilities via the Members Center, Editorial Membership, and… Eyoucms No fix yet Fix from $1,9502022-10-18 HIGH 8.8 CVE-2022-36225 EyouCMS V1.5.8-UTF8-SP1 is vulnerable to Cross Site Request Forgery (CSRF) via the background, column management function and add. Eyoucms No fix yet Fix from $1,9502022-08-19 MEDIUM 5.4 CVE-2022-35509 An issue was discovered in EyouCMS 1.5.8. There is a Storage XSS vulnerability that can allows an attacker to execute arbitrary Web scripts or HTML b… Eyoucms No fix yet Fix from $1,6002022-08-10 CRITICAL 9.8 CVE-2022-26273 EyouCMS v1.5.4 was discovered to lack parameter filtering in \user\controller\shop.php, leading to payment logic vulnerabilities. Eyoucms Mitigation only Fix from $2,3002022-03-28 CRITICAL 9.8 CVE-2022-26279 EyouCMS v1.5.5 was discovered to have no access control in the component /data/sqldata. Eyoucms No fix yet Fix from $2,3002022-03-24 HIGH 7.2 CVE-2021-42194 The wechat_return function in /controller/Index.php of EyouCms V1.5.4-UTF8-SP3 passes the user's input directly into the simplexml_ load_ String func… Eyoucms No fix yet Fix from $1,9502022-03-20 HIGH 8.1 CVE-2021-46255 eyouCMS V1.5.5-UTF8-SP3_1 suffers from Arbitrary file deletion due to insufficient filtering of the parameter filename. Eyoucms No fix yet Fix from $1,9502022-01-14 CRITICAL 9.8 CVE-2020-24000 SQL Injection vulnerability in eyoucms cms v1.4.7, allows attackers to execute arbitrary code and disclose sensitive information, via the tid paramet… Eyoucms No fix yet Fix from $2,3002021-11-03 HIGH 7.5 CVE-2021-39500 Eyoucms 1.5.4 is vulnerable to Directory Traversal. Due to a lack of input data sanitizaton in param tpldir, filename, type, nid an attacker can inje… Eyoucms Mitigation only Fix from $1,9502021-09-07 MEDIUM 6.1 CVE-2021-39501 EyouCMS 1.5.4 is vulnerable to Open Redirect. An attacker can redirect a user to a malicious url via the Logout function. Eyoucms No fix yet Fix from $1,6002021-09-07 CRITICAL 9.8 CVE-2021-39497 eyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject a url to trigger blind SSRF via the saveRemote() function. Eyoucms No fix yet Fix from $2,3002021-09-07 MEDIUM 6.1 CVE-2021-39499 A Cross-site scripting (XSS) vulnerability in Users in Qiong ICP EyouCMS 1.5.4 allows remote attackers to inject arbitrary web script or HTML via the… Eyoucms No fix yet Fix from $1,6002021-09-07 MEDIUM 5.4 CVE-2021-39496 Eyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject malicious code into `filename` param to trigger Reflected XSS. Eyoucms No fix yet Fix from $1,6002021-09-07