Lucene search
+L

766 matches found

NVD
NVD
added 2022/10/18 11:15 p.m.16 views

CVE-2022-41500

EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery CSRF vulnerabilities via the Members Center, Editorial Membership, and Points Recharge components...

8.8CVSS0.00375EPSS
Exploits1References1
OSV
OSV
added 2022/10/18 11:15 p.m.5 views

CVE-2022-41500

EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery CSRF vulnerabilities via the Members Center, Editorial Membership, and Points Recharge components...

8.8CVSS5.8AI score0.00375EPSS
Exploits1References1
Prion
Prion
added 2022/10/18 11:15 p.m.14 views

Cross site request forgery (csrf)

EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery CSRF vulnerabilities via the Members Center, Editorial Membership, and Points Recharge components...

6.8CVSS9AI score0.00375EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/10/18 12:0 a.m.5 views

CVE-2022-41500

EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery CSRF vulnerabilities via the Members Center, Editorial Membership, and Points Recharge components...

9.1AI score0.00375EPSS
Exploits1References1
Cvelist
Cvelist
added 2022/10/18 12:0 a.m.19 views

CVE-2022-41500

EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery CSRF vulnerabilities via the Members Center, Editorial Membership, and Points Recharge components...

9.2AI score0.00375EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2022/10/18 12:0 a.m.7 views

PT-2022-25897 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: EyouCMS version 1.5.9 Description: The issue concerns multiple Cross-Site Request Forgery CSRF vulnerabilities found in EyouCMS. These vulnerabilities are present in the Members Center, Editorial Membership, and Points Recharge components...

8.8CVSS8.9AI score0.00375EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/10/18 12:0 a.m.5 views

EyouCms 跨站请求伪造漏洞

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCms version V1.5.9, which stems from the discovery of multiple cross-site request forgery CSRF vulnerabilities vi...

8.8CVSS7.8AI score0.00375EPSS
Exploits1References2
CVE
CVE
added 2022/10/18 12:0 a.m.51 views

CVE-2022-41500

CVE-2022-41500 affects EyouCMS V1.5.9 with multiple CSRF vulnerabilities exposed via the Members Center, Editorial Membership, and Points Recharge components. The CVE’s scoring (CVSS v3.1) is 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and user interaction required; impacts span...

8.8CVSS9AI score0.00375EPSS
Exploits1References1Affected Software1
CNVD
CNVD
added 2022/08/23 12:0 a.m.60 views

EyouCms Cross-site Request Forgery Vulnerability (CNVD-2022-59207)

Zanzan Web Technology EyouCms Eyou CMS is a ThinkPHP-based open source content management system CMS from Zanzan Web Technology in China. version V1.5.8 of EyouCMS has a security vulnerability that stems from the existence of cross-site request forgery CSRF vulnerabilities through the backend,...

8.8CVSS1.9AI score0.00393EPSS
Exploits1References1
NVD
NVD
added 2022/08/19 5:15 p.m.21 views

CVE-2022-36225

EyouCMS V1.5.8-UTF8-SP1 is vulnerable to Cross Site Request Forgery CSRF via the background, column management function and add...

8.8CVSS0.00393EPSS
Exploits1References1
OSV
OSV
added 2022/08/19 5:15 p.m.5 views

CVE-2022-36225

EyouCMS V1.5.8-UTF8-SP1 is vulnerable to Cross Site Request Forgery CSRF via the background, column management function and add...

8.8CVSS5.8AI score0.00393EPSS
Exploits1References1
Prion
Prion
added 2022/08/19 5:15 p.m.20 views

Cross site request forgery (csrf)

EyouCMS V1.5.8-UTF8-SP1 is vulnerable to Cross Site Request Forgery CSRF via the background, column management function and add...

6.8CVSS8.8AI score0.00393EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2022/08/19 4:43 p.m.67 views

CVE-2022-36225

CVE-2022-36225 affects EyouCMS v1.5.8-UTF8-SP1. A CSRF vulnerability exists in the backend-related features: background, column management, and add functions. The NVD entry lists CVSS v3.1 base score 8.8 (HIGH) with network attack vector, user interaction required, and impacts to confidentiality,...

8.8CVSS8.8AI score0.00393EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/08/19 4:43 p.m.31 views

CVE-2022-36225

EyouCMS V1.5.8-UTF8-SP1 is vulnerable to Cross Site Request Forgery CSRF via the background, column management function and add...

9AI score0.00393EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/08/19 12:0 a.m.6 views

EyouCms 跨站请求伪造漏洞

Zanzan Web Technology EyouCms Eyou CMS is a ThinkPHP-based open source content management system CMS from Zanzan Web Technology in China. version V1.5.8 of EyouCMS has a security vulnerability that stems from the existence of cross-site request forgery CSRF vulnerabilities through the backend,...

8.8CVSS6.9AI score0.00393EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/08/19 12:0 a.m.21 views

PT-2022-23267 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: EyouCMS version 1.5.8-UTF8-SP1 Description: The issue concerns a Cross Site Request Forgery CSRF vulnerability. It affects the background, column management function, and add functionality. Recommendations: For EyouCMS version 1.5.8-UTF8-SP1,...

8.8CVSS8.7AI score0.00393EPSS
Exploits1References3
NVD
NVD
added 2022/08/10 8:15 p.m.18 views

CVE-2022-35509

An issue was discovered in EyouCMS 1.5.8. There is a Storage XSS vulnerability that can allows an attacker to execute arbitrary Web scripts or HTML by injecting a special payload via the title parameter in the foreground contribution, allowing the attacker to obtain sensitive information...

6.1CVSS0.00495EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/08/10 8:15 p.m.3 views

CVE-2022-35509

An issue was discovered in EyouCMS 1.5.8. There is a Storage XSS vulnerability that can allows an attacker to execute arbitrary Web scripts or HTML by injecting a special payload via the title parameter in the foreground contribution, allowing the attacker to obtain sensitive information...

5.4CVSS6.4AI score0.00495EPSS
Exploits1References2
Prion
Prion
added 2022/08/10 8:15 p.m.17 views

Design/Logic Flaw

An issue was discovered in EyouCMS 1.5.8. There is a Storage XSS vulnerability that can allows an attacker to execute arbitrary Web scripts or HTML by injecting a special payload via the title parameter in the foreground contribution, allowing the attacker to obtain sensitive information...

4.9CVSS5.5AI score0.00495EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2022/08/10 12:0 a.m.5 views

EyouCms 跨站脚本漏洞

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A cross-site scripting vulnerability exists in EyouCMS version 1.5.8, which can be exploited by an attacker to execute arbitrary Web script or HTML by...

5.4CVSS5.7AI score0.00495EPSS
Exploits1References2
Rows per page
Query Builder