EyouCMS 1.5.4 Open Redirect

EyouCMS 1.5.4 is vulnerable to an Open Redirect vulnerability. An attacker can redirect a user to a malicious url via the Logout function. id: CVE-2021-39501 info: name: EyouCMS 1.5.4 Open Redirect author: 0xAkoko severity: medium description: EyouCMS 1.5.4 is vulnerable to an Open Redirect...

eyoucms v.1.6.5 - Cross-Site Scripting

Cross Site Scripting XSS vulnerability in the func parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL. id: CVE-2024-22927 info: name: eyoucms v.1.6.5 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Cross Site Scripting XSS...

EyouCms v1.6.2 - Cross-Site Scripting

EyouCms v1.6.2 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /admin/twitter.php?activet. id: CVE-2023-41597 info: name: EyouCms v1.6.2 - Cross-Site Scripting author: ritikchaddha severity: medium description: | EyouCms v1.6.2 was discovered to...

EyouCms v1.6.3 - Information Disclosure

EyouCms v1.6.3 was discovered to contain an information disclosure vulnerability via the component /custommodelpath/recruit.filelist.txt. id: CVE-2023-37645 info: name: EyouCms v1.6.3 - Information Disclosure author: pussycat0x severity: medium description: | EyouCms v1.6.3 was discovered to...

EUVD-2026-109573

A vulnerability was determined in EyouCMS up to 1.8.3. This impacts the function remotefiletolocal of the file application/function.php. Executing a manipulation can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may ...

CVE-2026-116094

A vulnerability was determined in EyouCMS up to 1.8.3. This impacts the function remotefiletolocal of the file application/function.php. Executing a manipulation can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may ...

CVE-2026-116094 EyouCMS function.php remote_file_to_local server-side request forgery

A vulnerability was determined in EyouCMS up to 1.8.3. This impacts the function remotefiletolocal of the file application/function.php. Executing a manipulation can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may ...

CVE-2026-116094

A server-side request forgery (SSRF) vulnerability exists in EyouCMS up to version 1.8.3 . The flaw is located in the remote_file_to_local function within the application/function.php file. An attacker can exploit this vulnerability remotely by executing specific manipulations to trigger unauthor...

PT-2026-123120

Name of the Vulnerable Software and Affected Versions EyouCMS versions prior to 1.8.4 Description A flaw exists in the remote file to local function within the application/function.php file. This issue allows a remote attacker to perform server-side request forgery SSRF, a technique where the...

CVE-2026-1107

CVE-2026-1107 Nuclei Template Nuclei template for detecting CVE-2026-1107 in EyouCMS. The vulnerability allows unauthenticated attackers to perform Path Traversal/Arbitrary File Read via the checkuserinfo function in Diyajax.php. Vulnerability Details CVE ID: CVE-2026-1107 Target: EyouCMS 1.7.1...

EyouCms v1.6.3 - Information Disclosure Detection

EyouCms v1.6.3 was discovered to contain an information disclosure vulnerability via the component /custommodelpath/recruit.filelist.txt. !/usr/bin/env python3 -- coding: utf-8 -- """EyouCms v1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

EyouCMS 1.5.4 Open Redirect Detection

EyouCMS 1.5.4 is vulnerable to an Open Redirect vulnerability. An attacker can redirect a user to a malicious url via the Logout function. !/usr/bin/env python3 -- coding: utf-8 -- """EyouCMS 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

eyoucms v.1.6.5 - Cross-Site Scripting Detection

Cross Site Scripting XSS vulnerability in the func parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL. !/usr/bin/env python3 -- coding: utf-8 -- """Cross Site Scripting XSS vulnerability in the func parameter in eyoucms v.""" from kittysploit import from...

EyouCMS - Installation Detection

EyouCMS installation is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """EyouCMS installation is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'EyouCMS - Installation Detection', 'description': 'EyouCM...

CVE-2026-13569

A security vulnerability has been detected in weng-xianhu EyouCMS up to 1.7.1. This issue affects some unknown processing of the file /index.php of the component API. Such manipulation of the argument clicklike leads to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-13569 weng-xianhu EyouCMS API index.php sql injection

A security vulnerability has been detected in weng-xianhu EyouCMS up to 1.7.1. This issue affects some unknown processing of the file /index.php of the component API. Such manipulation of the argument clicklike leads to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-13569

A security vulnerability has been detected in weng-xianhu EyouCMS up to 1.7.1. This issue affects some unknown processing of the file /index.php of the component API. Such manipulation of the argument clicklike leads to sql injection. The attack can be executed remotely. The exploit has been...

EUVD-2026-40089

A security vulnerability has been detected in weng-xianhu EyouCMS up to 1.7.1. This issue affects some unknown processing of the file /index.php of the component API. Such manipulation of the argument clicklike leads to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-13569 weng-xianhu EyouCMS API index.php sql injection

A security vulnerability has been detected in weng-xianhu EyouCMS up to 1.7.1. This issue affects some unknown processing of the file /index.php of the component API. Such manipulation of the argument clicklike leads to sql injection. The attack can be executed remotely. The exploit has been...

PT-2026-53265

A security vulnerability has been detected in weng-xianhu EyouCMS up to 1.7.1. This issue affects some unknown processing of the file /index.php of the component API. Such manipulation of the argument click like leads to sql injection. The attack can be executed remotely. The exploit has been...