766 matches found
CVE-2022-41500
EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery CSRF vulnerabilities via the Members Center, Editorial Membership, and Points Recharge components...
CVE-2022-41500
EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery CSRF vulnerabilities via the Members Center, Editorial Membership, and Points Recharge components...
Cross site request forgery (csrf)
EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery CSRF vulnerabilities via the Members Center, Editorial Membership, and Points Recharge components...
CVE-2022-41500
EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery CSRF vulnerabilities via the Members Center, Editorial Membership, and Points Recharge components...
CVE-2022-41500
EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery CSRF vulnerabilities via the Members Center, Editorial Membership, and Points Recharge components...
PT-2022-25897 · Eyoucms · Eyoucms
Name of the Vulnerable Software and Affected Versions: EyouCMS version 1.5.9 Description: The issue concerns multiple Cross-Site Request Forgery CSRF vulnerabilities found in EyouCMS. These vulnerabilities are present in the Members Center, Editorial Membership, and Points Recharge components...
EyouCms 跨站请求伪造漏洞
Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCms version V1.5.9, which stems from the discovery of multiple cross-site request forgery CSRF vulnerabilities vi...
CVE-2022-41500
CVE-2022-41500 affects EyouCMS V1.5.9 with multiple CSRF vulnerabilities exposed via the Members Center, Editorial Membership, and Points Recharge components. The CVE’s scoring (CVSS v3.1) is 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and user interaction required; impacts span...
EyouCms Cross-site Request Forgery Vulnerability (CNVD-2022-59207)
Zanzan Web Technology EyouCms Eyou CMS is a ThinkPHP-based open source content management system CMS from Zanzan Web Technology in China. version V1.5.8 of EyouCMS has a security vulnerability that stems from the existence of cross-site request forgery CSRF vulnerabilities through the backend,...
CVE-2022-36225
EyouCMS V1.5.8-UTF8-SP1 is vulnerable to Cross Site Request Forgery CSRF via the background, column management function and add...
CVE-2022-36225
EyouCMS V1.5.8-UTF8-SP1 is vulnerable to Cross Site Request Forgery CSRF via the background, column management function and add...
Cross site request forgery (csrf)
EyouCMS V1.5.8-UTF8-SP1 is vulnerable to Cross Site Request Forgery CSRF via the background, column management function and add...
CVE-2022-36225
CVE-2022-36225 affects EyouCMS v1.5.8-UTF8-SP1. A CSRF vulnerability exists in the backend-related features: background, column management, and add functions. The NVD entry lists CVSS v3.1 base score 8.8 (HIGH) with network attack vector, user interaction required, and impacts to confidentiality,...
CVE-2022-36225
EyouCMS V1.5.8-UTF8-SP1 is vulnerable to Cross Site Request Forgery CSRF via the background, column management function and add...
EyouCms 跨站请求伪造漏洞
Zanzan Web Technology EyouCms Eyou CMS is a ThinkPHP-based open source content management system CMS from Zanzan Web Technology in China. version V1.5.8 of EyouCMS has a security vulnerability that stems from the existence of cross-site request forgery CSRF vulnerabilities through the backend,...
PT-2022-23267 · Eyoucms · Eyoucms
Name of the Vulnerable Software and Affected Versions: EyouCMS version 1.5.8-UTF8-SP1 Description: The issue concerns a Cross Site Request Forgery CSRF vulnerability. It affects the background, column management function, and add functionality. Recommendations: For EyouCMS version 1.5.8-UTF8-SP1,...
CVE-2022-35509
An issue was discovered in EyouCMS 1.5.8. There is a Storage XSS vulnerability that can allows an attacker to execute arbitrary Web scripts or HTML by injecting a special payload via the title parameter in the foreground contribution, allowing the attacker to obtain sensitive information...
CVE-2022-35509
An issue was discovered in EyouCMS 1.5.8. There is a Storage XSS vulnerability that can allows an attacker to execute arbitrary Web scripts or HTML by injecting a special payload via the title parameter in the foreground contribution, allowing the attacker to obtain sensitive information...
Design/Logic Flaw
An issue was discovered in EyouCMS 1.5.8. There is a Storage XSS vulnerability that can allows an attacker to execute arbitrary Web scripts or HTML by injecting a special payload via the title parameter in the foreground contribution, allowing the attacker to obtain sensitive information...
EyouCms 跨站脚本漏洞
Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A cross-site scripting vulnerability exists in EyouCMS version 1.5.8, which can be exploited by an attacker to execute arbitrary Web script or HTML by...