CVE-2023-2058

A vulnerability was found in EyouCms up to 1.6.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /yxcms/index.php?r=admin/extendfield/mesedit&tabid=12&id=4 of the component HTTP POST Request Handler. The manipulation of the argument...

CVE-2023-2057

A vulnerability was found in EyouCms 1.5.4. It has been classified as problematic. Affected is an unknown function of the file login.php?m=admin&c=Arctype&a=edit of the component New Picture Handler. The manipulation of the argument litpicloca leads to cross site scripting. It is possible to laun...

CVE-2023-2058

A vulnerability was found in EyouCms up to 1.6.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /yxcms/index.php?r=admin/extendfield/mesedit&tabid=12&id=4 of the component HTTP POST Request Handler. The manipulation of the argument...

Cross site scripting

A vulnerability was found in EyouCms up to 1.6.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /yxcms/index.php?r=admin/extendfield/mesedit&tabid=12&id=4 of the component HTTP POST Request Handler. The manipulation of the argument...

Cross site scripting

A vulnerability was found in EyouCms 1.5.4. It has been classified as problematic. Affected is an unknown function of the file login.php?m=admin&c=Arctype&a=edit of the component New Picture Handler. The manipulation of the argument litpicloca leads to cross site scripting. It is possible to laun...

CVE-2023-2058 EyouCms HTTP POST Request cross site scripting

A vulnerability was found in EyouCms up to 1.6.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /yxcms/index.php?r=admin/extendfield/mesedit&tabid=12&id=4 of the component HTTP POST Request Handler. The manipulation of the argument...

CVE-2023-2058

CVE-2023-2058 affects EyouCms up to version 1.6.2. The vulnerability is a Cross-Site Scripting (XSS) in an unknown functionality of the endpoint /yxcms/index.php?r=admin/extendfield/mesedit&tabid=12&id=4, triggered by manipulating the web_ico argument in an HTTP POST request. It is described as e...

CVE-2023-2057 EyouCms New Picture cross site scripting

A vulnerability was found in EyouCms 1.5.4. It has been classified as problematic. Affected is an unknown function of the file login.php?m=admin&c=Arctype&a=edit of the component New Picture Handler. The manipulation of the argument litpicloca leads to cross site scripting. It is possible to laun...

CVE-2023-2057 EyouCms New Picture cross site scripting

A vulnerability was found in EyouCms 1.5.4. It has been classified as problematic. Affected is an unknown function of the file login.php?m=admin&c=Arctype&a=edit of the component New Picture Handler. The manipulation of the argument litpicloca leads to cross site scripting. It is possible to laun...

CVE-2023-2057

CVE-2023-2057 affects EyouCms 1.5.4, specifically the New Picture Handler in login.php?m=admin&c=Arctype&a=edit. The root cause is manipulation of the parameter litpic_loca (as reported in multiple sources) that leads to cross-site scripting. The vulnerability can be exploited remotely and, per t...

EyouCms 跨站脚本漏洞

Zanzan Network Technology EyouCms Eyou CMS is a set of open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A cross-site scripting vulnerability exists in EyouCms version 1.5.4, which originates from a problem with the file...

PT-2023-17468

Name of the Vulnerable Software and Affected Versions EyouCms versions up to 1.6.2 Description A vulnerability was found in an unknown functionality of the file /yxcms/index.php?r=admin/extendfield/mesedit&tabid=12&id=4 of the component HTTP POST Request Handler. The manipulation of the web ico...

PT-2023-17465 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: EyouCms version 1.5.4 Description: A problematic issue was found in the New Picture Handler component, specifically in the file login.php, where an unknown function is affected. The manipulation of the litpic loca argument leads to cross-site...

CVE-2023-1799

A vulnerability, which was classified as problematic, was found in EyouCMS up to 1.5.4. This affects an unknown part of the file login.php. The manipulation of the argument tagtag leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2023-1798

A vulnerability, which was classified as problematic, has been found in EyouCMS up to 1.5.4. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument typename leads to cross site scripting. The attack may be launched remotely. The exploit has be...

Cross site scripting

A vulnerability, which was classified as problematic, has been found in EyouCMS up to 1.5.4. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument typename leads to cross site scripting. The attack may be launched remotely. The exploit has be...

Cross site scripting

A vulnerability, which was classified as problematic, was found in EyouCMS up to 1.5.4. This affects an unknown part of the file login.php. The manipulation of the argument tagtag leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2023-1799 EyouCMS login.php cross site scripting

A vulnerability, which was classified as problematic, was found in EyouCMS up to 1.5.4. This affects an unknown part of the file login.php. The manipulation of the argument tagtag leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2023-1799 EyouCMS login.php cross site scripting

A vulnerability, which was classified as problematic, was found in EyouCMS up to 1.5.4. This affects an unknown part of the file login.php. The manipulation of the argument tagtag leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2023-1799

CVE-2023-1799 affects EyouCMS up to version 1.5.4, with a cross-site scripting vulnerability in the login.php component triggered by manipulating the tag_tag argument. The issue is exploitable remotely and is linked to an unknown function in login.php; multiple sources corroborate an XSS conditio...