767 matches found
CVE-2022-45538
EyouCMS = 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENVGOBACKURL"...
EyouCMS 跨站脚本漏洞
Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology Company. A cross-site scripting vulnerability exists in EyouCMS version 1.6.0 and earlier versions, which stems from a reflected cross-site scripting...
PT-2023-14692 · Eyoucms · Eyoucms
Name of the Vulnerable Software and Affected Versions: EyouCMS versions 1.6.0 and earlier Description: A reflected-XSS issue was discovered in the article publish component. The issue is related to the cookie ENV LIST URL. Recommendations: For EyouCMS versions 1.6.0 and earlier, update to a versi...
CVE-2022-45541
CVE-2022-45541 affects EyouCMS
CVE-2022-45540
EyouCMS = 1.6.0 was discovered a reflected-XSS in article type editor component in POST value "name" if the value contains a malformed UTF-8 char...
PT-2023-14698 · Eyoucms · Eyoucms
Name of the Vulnerable Software and Affected Versions: EyouCMS versions prior to 1.6.0 Description: A reflected-XSS issue was discovered in the FileManager component. The issue occurs in the GET parameter filename when editing any file. Recommendations: For EyouCMS versions prior to 1.6.0, update...
CVE-2022-45537
CVE-2022-45537 affects EyouCMS versions
EyouCMS 跨站脚本漏洞
Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology Company. A cross-site scripting vulnerability exists in EyouCMS version 1.6.0 and earlier versions, which originates from the activepath GET parameter of...
CVE-2022-45542
EyouCMS = 1.6.0 was discovered a reflected-XSS in the FileManager component in GET parameter "filename" when editing any file...
CVE-2022-45539
CVE-2022-45539 affects EyouCMS
CVE-2022-45539
EyouCMS = 1.6.0 was discovered a reflected-XSS in FileManager component in GET value "activepath" when creating a new file...
CVE-2022-45540
Summary: CVE-2022-45540 affects EyouCMS versions up to 1.6.0 and is a reflected cross-site scripting (XSS) vulnerability in the article type editor component. The issue arises in the POST parameter name when the value contains a malformed UTF-8 character, enabling potential script injection. The ...
EyouCms 跨站脚本漏洞
Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology Company. A cross-site scripting vulnerability exists in EyouCMS version 1.6.0 and earlier versions, which stems from a reflective cross-site scripting...
CVE-2022-45539
EyouCMS = 1.6.0 was discovered a reflected-XSS in FileManager component in GET value "activepath" when creating a new file...
CVE-2022-45542
EyouCMS = 1.6.0 was discovered a reflected-XSS in the FileManager component in GET parameter "filename" when editing any file...
CVE-2022-45538
EyouCMS = 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENVGOBACKURL"...
CVE-2022-45537
EyouCMS = 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENVLISTURL"...
CVE-2022-45542
CVE-2022-45542 affects EyouCMS versions prior to or equal to 1.6.0. The vulnerability is a reflected XSS in the FileManager component triggered via the GET parameter filename when editing any file. Root cause is reflected XSS from unsanitized filename input. Impact per sources is a low/none confi...
