Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
eyoucms vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2022-41500
EyouCMS V1.5.9 exists to contain multiple Cross-Site Request Forgery (CSRF) vulnerabilities via the Members Center, Editorial Membership, and Points Recharge components.
Eyoucms Eyoucms 1.5.9
NA
CVE-2022-35509
An issue exists in EyouCMS 1.5.8. There is a Storage XSS vulnerability that can allows an malicious user to execute arbitrary Web scripts or HTML by injecting a special payload via the title parameter in the foreground contribution, allowing the malicious user to obtain sensitive...
Eyoucms Eyoucms 1.5.8
3.5
CVSSv2
CVE-2020-20645
Cross Site Scripting (XSS) vulnerability exists in EyouCMS1.3.6 in the basic_information area.
Eyoucms Eyoucms 1.3.6
6.5
CVSSv2
CVE-2021-42194
The wechat_return function in /controller/Index.php of EyouCms V1.5.4-UTF8-SP3 passes the user's input directly into the simplexml_ load_ String function, which itself does not prohibit external entities, triggering a XML external entity (XXE) injection vulnerability.
Eyoucms Eyoucms 1.5.4
NA
CVE-2023-33492
EyouCMS 1.6.2 is vulnerable to Cross Site Scripting (XSS).
Eyoucms Eyoucms 1.6.2
NA
CVE-2023-34657
A stored cross-site scripting (XSS) vulnerability in Eyoucms v1.6.2 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload injected into the web_recordnum parameter.
Eyoucms Eyoucms 1.6.2
NA
CVE-2023-2057
A vulnerability was found in EyouCms 1.5.4. It has been classified as problematic. Affected is an unknown function of the file login.php?m=admin&c=Arctype&a=edit of the component New Picture Handler. The manipulation of the argument litpic_loca leads to cross site scripti...
Eyoucms Eyoucms 1.5.4
3.5
CVSSv2
CVE-2020-21929
A stored cross site scripting (XSS) vulnerability in the web_copyright field of Eyoucms v1.4.1 allows authenticated malicious users to execute arbitrary web scripts or HTML.
Eyoucms Eyoucms 1.4.1
3.5
CVSSv2
CVE-2020-21930
A stored cross site scripting (XSS) vulnerability in the web_attr_2 field of Eyoucms v1.4.1 allows authenticated malicious users to execute arbitrary web scripts or HTML.
Eyoucms Eyoucms 1.4.1
3.5
CVSSv2
CVE-2022-33122
A stored cross-site scripting (XSS) vulnerability in eyoucms v1.5.6 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload injected into the URL field under the login page.
Eyoucms Eyoucms 1.5.6
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereference
CVE-2023-52689
CVE-2024-23803
client side
CVE-2023-52696
information disclosure
CVE-2024-35843
CVE-2024-27130
CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »