Improper access control

EyouCMS v1.5.5 was discovered to have no access control in the component /data/sqldata...

CVE-2022-26279

EyouCMS v1.5.5 was discovered to have no access control in the component /data/sqldata...

CVE-2022-26279

EyouCMS v1.5.5 has a vulnerability in the /data/sqldata component due to lack of access control. Affected software: EyouCMS 1.5.5. Root cause: missing access restrictions in /data/sqldata. Impact: high, with CVSS v3.1 base score 9.8 (NETWORK, LOW complexity, PR: NONE, UI: NONE; Confidentiality/In...

EyouCms 安全漏洞

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in the /data/sqldata component of EyouCms v1.5.5, which stems from the lack of access control in the component...

CVE-2021-42194

The wechatreturn function in /controller/Index.php of EyouCms V1.5.4-UTF8-SP3 passes the user's input directly into the simplexml load String function, which itself does not prohibit external entities, triggering a XML external entity XXE injection vulnerability...

CVE-2021-42194

The wechatreturn function in /controller/Index.php of EyouCms V1.5.4-UTF8-SP3 passes the user's input directly into the simplexml load String function, which itself does not prohibit external entities, triggering a XML external entity XXE injection vulnerability...

CVE-2021-42194

The wechatreturn function in /controller/Index.php of EyouCms V1.5.4-UTF8-SP3 passes the user's input directly into the simplexml load String function, which itself does not prohibit external entities, triggering a XML external entity XXE injection vulnerability...

Xxe

The wechatreturn function in /controller/Index.php of EyouCms V1.5.4-UTF8-SP3 passes the user's input directly into the simplexml load String function, which itself does not prohibit external entities, triggering a XML external entity XXE injection vulnerability...

CVE-2021-42194

CVE-2021-42194—XXE in EyouCms : The vulnerability is in EyouCms V1.5.4-UTF8-SP3, where the wechat_return function in /controller/Index.php passes user input directly to simplexml_load_String. The function does not prohibit external entities, enabling a XML External Entity (XXE) injection. Impact ...

CVE-2021-42194

The wechatreturn function in /controller/Index.php of EyouCms V1.5.4-UTF8-SP3 passes the user's input directly into the simplexml load String function, which itself does not prohibit external entities, triggering a XML external entity XXE injection vulnerability...

赞赞网络科技 EyouCms 代码问题漏洞

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCms V1.5.4-UTF8-SP3, which originates from the wechatreturn function in /controller/Index.php that passes the...

CVE-2021-46255

eyouCMS V1.5.5-UTF8-SP31 suffers from Arbitrary file deletion due to insufficient filtering of the parameter filename...

CVE-2021-46255

eyouCMS V1.5.5-UTF8-SP31 suffers from Arbitrary file deletion due to insufficient filtering of the parameter filename...

CVE-2021-46255

eyouCMS V1.5.5-UTF8-SP31 suffers from Arbitrary file deletion due to insufficient filtering of the parameter filename...

Arbitrary file deletion

eyouCMS V1.5.5-UTF8-SP31 suffers from Arbitrary file deletion due to insufficient filtering of the parameter filename...

CVE-2021-46255

CVE-2021-46255 affects eyouCMS v1.5.5-UTF8-SP3_1, where an insufficiently filtered filename parameter enables arbitrary file deletion. The attached details specify the root cause as inadequate input filtering in the filename parameter, leading to deletion of arbitrary files. The vulnerability is ...

CVE-2021-46255

eyouCMS V1.5.5-UTF8-SP31 suffers from Arbitrary file deletion due to insufficient filtering of the parameter filename...

EyouCms安全漏洞

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCms, which originates from eyouCMS V1.5.5-UTF8-SP31 Deletion of arbitrary files due to insufficient parameter...

EyouCms SQL Injection Vulnerability

EyouCms is a free + open source enterprise content management system based on the TP5.0 framework as the core development, focusing on the needs of enterprise building users. A SQL injection vulnerability exists in index.php in EyouCms version 1.4.7. An attacker can exploit this vulnerability by...

CVE-2020-24000

SQL Injection vulnerability in eyoucms cms v1.4.7, allows attackers to execute arbitrary code and disclose sensitive information, via the tid parameter to index.php...