Lucene search
+L

45 matches found

NVD
NVD
•added 2023/07/06 3:15 p.m.•28 views

CVE-2023-37134

A stored cross-site scripting XSS vulnerability in the Basic Information module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

5.4CVSS5.3AI score0.00376EPSS
SaveExploits1References1
Prion
Prion
•added 2023/07/06 3:15 p.m.•28 views

Cross site scripting

A stored cross-site scripting XSS vulnerability in the Basic Information module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

4.9CVSS5.2AI score0.00376EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/06 12:00 a.m.•1 views

CVE-2023-37134: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the Basic Information module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

5.4CVSS6.2AI score0.00376EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/07/06 12:00 a.m.•13 views

EyouCms 跨站脚本漏洞

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology Company. A security vulnerability exists in EyouCms v1.6.3, which originates from a stored cross-site scripting XSS vulnerability in Basic Information...

5.4CVSS5.3AI score0.00376EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/07/06 12:00 a.m.•15 views

CVE-2023-37134

A stored cross-site scripting XSS vulnerability in the Basic Information module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

5.6AI score0.00376EPSS
SaveExploits1References1
OSV
OSV
•added 2023/06/22 3:15 p.m.•15 views

CVE-2023-36093

There is a storage type cross site scripting XSS vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3...

5.4CVSS5.6AI score0.00384EPSS
SaveExploits1References1
NVD
NVD
•added 2023/06/22 3:15 p.m.•27 views

CVE-2023-36093

There is a storage type cross site scripting XSS vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3...

5.4CVSS5.3AI score0.00384EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/06/22 3:15 p.m.•8 views

CVE-2023-36093

There is a storage type cross site scripting XSS vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3...

5.4CVSS5.2AI score0.00384EPSS
SaveExploits1References2
Prion
Prion
•added 2023/06/22 3:15 p.m.•28 views

Cross site scripting

There is a storage type cross site scripting XSS vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3...

4.9CVSS5.3AI score0.00384EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2023/06/22 12:00 a.m.•11 views

EyouCMS 跨站脚本漏洞

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCMS version 1.6.3, which originates from a stored cross-site scripting XSS vulnerability in the Basic Information...

5.4CVSS5.3AI score0.00384EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/06/22 12:00 a.m.•48 views

CVE-2023-36093

There is a storage type cross site scripting XSS vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3...

5.5AI score0.00384EPSS
SaveExploits1References1
OSV
OSV
•added 2023/02/27 3:15 p.m.•14 views

CVE-2022-45139

A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver. In combination with CVE-2022-45138 this could lead to disclosure of device information like CPU diagnostics. As there is just a limited amount of...

5.3CVSS5.8AI score0.00254EPSS
SaveExploits0References1
NVD
NVD
•added 2023/02/08 7:15 p.m.•34 views

CVE-2022-45755

Cross-site scripting XSS vulnerability in EyouCMS v1.6.0 allows attackers to execute arbitrary code via the home page description on the basic information page...

5.4CVSS5.6AI score0.00447EPSS
SaveExploits1References1
OSV
OSV
•added 2023/02/08 7:15 p.m.•12 views

CVE-2022-45755

Cross-site scripting XSS vulnerability in EyouCMS v1.6.0 allows attackers to execute arbitrary code via the home page description on the basic information page...

5.4CVSS6.1AI score0.00447EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/02/08 12:00 a.m.•12 views

EyouCMS 跨站脚本漏洞

Zanzan Network Technology EyouCms EyouCMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCMS v1.6.0. An attacker exploited the vulnerability to execute arbitrary code via the homepage description on the...

5.4CVSS6.3AI score0.00447EPSS
SaveExploits1References2
OSV
OSV
•added 2022/11/14 8:15 p.m.•14 views

CVE-2022-44387

EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery CSRF via the Basic Information component under the Edit Member module...

8.8CVSS5.8AI score0.00278EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/11/14 12:00 a.m.•12 views

EyouCms 跨站请求伪造漏洞

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCms version V1.5.9-UTF8-SP1, which originates from the inclusion of cross-site request forgery CSRF via the Basic...

8.8CVSS7.7AI score0.00278EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/11/14 12:00 a.m.•12 views

PT-2022-27206 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: EyouCMS version 1.5.9-UTF8-SP1 Description: A Cross-Site Request Forgery CSRF issue was discovered in the Basic Information component under the Edit Member module. This allows for unauthorized actions to be performed on behalf of a user...

8.8CVSS7.1AI score0.00278EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/14 12:00 a.m.•1 views

CVE-2022-44387: Cross-Site Request Forgery (CSRF)

EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery CSRF via the Basic Information component under the Edit Member module...

8.8CVSS5.8AI score0.00278EPSS
SaveExploits0References3
OSV
OSV
•added 2021/08/26 6:15 p.m.•12 views

CVE-2020-18476

SQL Injection vulnerability in Hucart CMS 5.7.4 via the basic information field found in the avatar usdimage field...

8.8CVSS5.8AI score0.00887EPSS
SaveExploits1References1
Rows per page
Query Builder