CVE-2026-1107

CVE-2026-1107 Nuclei 模板 用于检测 EyouCMS 中 CVE-2026-1107 的 Nuclei 模板。 该漏洞允许未认证攻击者通过 Diyajax.php 中的 checkuserinfo 函数执行路径遍历/任意文件读取。 漏洞详情 CVE ID： CVE-2026-1107 目标： EyouCMS 1.7.1 组件： 会员头像处理器（Diyajax.php） 影响： 严重（任意文件读取 / 潜在远程代码执行） 攻击向量： POST /index.php?m=api&c=Diyajax&a=checkuserinfo（参数：viewfile） 检测逻辑...

EyouCMS code-related vulnerabilities

EyouCMS is an open-source content management system CMS developed by Eyou Corporation in China, based on ThinkPHP. Versions of EyouCMS 1.7.1/5.0 and earlier have code vulnerabilities. These vulnerabilities stem from incorrect handling of the viewfile parameter in the checkuserinfo function of the...

PT-2026-3375

A weakness has been identified in EyouCMS up to 1.7.1/5.0. Impacted is the function check userinfo of the file Diyajax.php of the component Member Avatar Handler. Executing a manipulation of the argument viewfile can lead to unrestricted upload. The attack may be performed from remote. The exploi...