CVE-2026-1107

CVE-2026-1107 Nuclei 템플릿 EyouCMS의 CVE-2026-1107 을 탐지하기 위한 Nuclei 템플릿입니다. 이 취약점은 인증되지 않은 공격자가 Diyajax.php의 checkuserinfo 함수를 통해 경로 탐색Path Traversal/임의 파일 읽기Arbitrary File Read를 수행할 수 있게 합니다. 취약점 세부 정보 CVE ID: CVE-2026-1107 대상: EyouCMS 1.7.1 구성 요소: 회원 아바타 처리기 Diyajax.php 영향: 치명적 임의 파일 읽기 / 잠재적 RCE ...

EyouCMS code-related vulnerabilities

EyouCMS is an open-source content management system CMS developed by Eyou Corporation in China, based on ThinkPHP. Versions of EyouCMS 1.7.1/5.0 and earlier have code vulnerabilities. These vulnerabilities stem from incorrect handling of the viewfile parameter in the checkuserinfo function of the...

PT-2026-3375

A weakness has been identified in EyouCMS up to 1.7.1/5.0. Impacted is the function check userinfo of the file Diyajax.php of the component Member Avatar Handler. Executing a manipulation of the argument viewfile can lead to unrestricted upload. The attack may be performed from remote. The exploi...

CVE-2026-1107: Unrestricted Upload of File with Dangerous Type

A weakness has been identified in EyouCMS up to 1.7.1/5.0. Impacted is the function checkuserinfo of the file Diyajax.php of the component Member Avatar Handler. Executing a manipulation of the argument viewfile can lead to unrestricted upload. The attack may be performed from remote. The exploit...