766 matches found
CVE-2024-3431 EyouCMS Backend deserialization
A vulnerability was found in EyouCMS 1.6.5. It has been declared as critical. This vulnerability affects unknown code of the file /login.php?m=admin&c=Field&a=channeledit of the component Backend. The manipulation of the argument channelid leads to deserialization. The attack can be initiated...
CVE-2024-3431
CVE-2024-3431 (EyouCMS 1.6.5) involves a deserialization vulnerability in the Backend at the file path /login.php?m=admin&c=Field&a=channel_edit, where manipulating the argument channel_id leads to code execution. The issue is exploitable remotely and has public exploits/disclosures. Multiple sou...
EyouCMS 代码问题漏洞
EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP. EyouCMS version 1.6.5 has a deserialization vulnerability, the vulnerability stems from the unsafe deserialization of the parameter channelid of the file /login.php in the receipt of user-submitted serialized data...
PT-2024-25782 · Eyoucms · Eyoucms
Name of the Vulnerable Software and Affected Versions: EyouCMS version 1.6.5 Description: A critical issue affects the Backend component of EyouCMS, specifically the file /login.php?m=admin&c=Field&a=channel edit. The manipulation of the channel id argument leads to deserialization. This issue ca...
CVE-2023-42286
There is a PHP file inclusion vulnerability in the template configuration of eyoucms v1.6.4, allowing attackers to execute code or system commands through a carefully crafted malicious payload...
EyouCms Security Vulnerability
Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCms v1.6.4, which stems from the existence of a PHP file inclusion vulnerability...
PT-2024-13035 · Eyoucms · Eyoucms
Name of the Vulnerable Software and Affected Versions: eyoucms version 1.6.4 Description: The issue is related to a PHP file inclusion vulnerability in the template configuration, allowing attackers to execute code or system commands through a carefully crafted malicious payload. Recommendations:...
CVE-2023-42286
There is a PHP file inclusion vulnerability in the template configuration of eyoucms v1.6.4, allowing attackers to execute code or system commands through a carefully crafted malicious payload...
CVE-2023-42286
Summary: CVE-2023-42286 affects eyoucms v1.6.4 and is a PHP file inclusion vulnerability in the template configuration that can lead to code execution or command execution when a crafted payload is processed. The CVSSv3.1 score is 9.8 (CRITICAL), with network attack vector, no privileges required...
CVE-2024-23031
Cross Site Scripting XSS vulnerability in iswater parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL...
CVE-2024-23033
Cross Site Scripting vulnerability in the path parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL...
CVE-2024-23034
Cross Site Scripting vulnerability in the input parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL...
CVE-2024-23032
Cross Site Scripting vulnerability in num parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL...
CVE-2024-23034
Cross Site Scripting vulnerability in the input parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL...
CVE-2024-23031
Cross Site Scripting XSS vulnerability in iswater parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL...
CVE-2024-23033
Cross Site Scripting vulnerability in the path parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL...
CVE-2024-23032
Cross Site Scripting vulnerability in num parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL...
CVE-2024-22927
Cross Site Scripting XSS vulnerability in the func parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL...
