Lucene search
+L

766 matches found

RedhatCVE
RedhatCVE
added 2025/12/29 5:1 p.m.5 views

CVE-2025-15143

A security flaw has been discovered in EyouCMS up to 1.7.6. The affected element is an unknown function of the file /application/admin/logic/FilemanagerLogic.php of the component Backend Template Management. The manipulation of the argument content results in sql injection. It is possible to laun...

7.2CVSS5AI score0.00329EPSS
Exploits1References1
EUVD
EUVD
added 2025/12/28 6:30 p.m.7 views

EUVD-2025-205521

A security flaw has been discovered in EyouCMS up to 1.7.6. The affected element is an unknown function of the file /application/admin/logic/FilemanagerLogic.php of the component Backend Template Management. The manipulation of the argument content results in sql injection. It is possible to laun...

5.8CVSS6.3AI score0.00329EPSS
Exploits1References5
NVD
NVD
added 2025/12/28 4:15 p.m.8 views

CVE-2025-15143

A security flaw has been discovered in EyouCMS up to 1.7.6. The affected element is an unknown function of the file /application/admin/logic/FilemanagerLogic.php of the component Backend Template Management. The manipulation of the argument content results in sql injection. It is possible to laun...

7.2CVSS0.00329EPSS
Exploits1References4
OSV
OSV
added 2025/12/28 4:15 p.m.4 views

CVE-2025-15143

A security flaw has been discovered in EyouCMS up to 1.7.6. The affected element is an unknown function of the file /application/admin/logic/FilemanagerLogic.php of the component Backend Template Management. The manipulation of the argument content results in sql injection. It is possible to laun...

7.2CVSS5.6AI score0.00329EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/12/28 4:2 p.m.3 views

CVE-2025-15143 EyouCMS Backend Template Management FilemanagerLogic.php sql injection

A security flaw has been discovered in EyouCMS up to 1.7.6. The affected element is an unknown function of the file /application/admin/logic/FilemanagerLogic.php of the component Backend Template Management. The manipulation of the argument content results in sql injection. It is possible to laun...

5.8CVSS5AI score0.00329EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2025/12/28 4:2 p.m.2 views

CVE-2025-15143

A security flaw has been discovered in EyouCMS up to 1.7.6. The affected element is an unknown function of the file /application/admin/logic/FilemanagerLogic.php of the component Backend Template Management. The manipulation of the argument content results in sql injection. It is possible to laun...

7.2CVSS5.3AI score0.00329EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/12/28 4:2 p.m.33 views

CVE-2025-15143 EyouCMS Backend Template Management FilemanagerLogic.php sql injection

A security flaw has been discovered in EyouCMS up to 1.7.6. The affected element is an unknown function of the file /application/admin/logic/FilemanagerLogic.php of the component Backend Template Management. The manipulation of the argument content results in sql injection. It is possible to laun...

5.8CVSS0.00329EPSS
Exploits1References4
CVE
CVE
added 2025/12/28 4:2 p.m.27 views

CVE-2025-15143

CVE-2025-15143 affects EyouCMS up to 1.7.6. The vulnerability is in /application/admin/logic/FilemanagerLogic.php (Backend Template Management) where the manipulation of the content parameter enables SQL injection. Exploitation can be remote, and an exploit has been publicly released. The vendor ...

7.2CVSS5AI score0.00329EPSS
Exploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/28 12:0 a.m.10 views

PT-2025-53658

Name of the Vulnerable Software and Affected Versions EyouCMS versions prior to 1.7.7 Description A security flaw exists in EyouCMS up to version 1.7.6. The issue is related to a SQL injection within the Backend Template Management component, specifically in the file...

7.2CVSS7.1AI score0.00329EPSS
Exploits1References11
CNNVD
CNNVD
added 2025/12/28 12:0 a.m.7 views

EyouCMS SQL注入漏洞

EyouCMS is an open source content management system CMS based on ThinkPHP by China Eyou Eyou. EyouCMS 1.7.6 and previous versions exist SQL injection vulnerability, the vulnerability stems from the wrong operation of the parameter content in the file /application/admin/logic/FilemanagerLogic.php,...

7.2CVSS5.7AI score0.00329EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/12/04 12:11 a.m.10 views

CVE-2025-65868

XML external entity XXE injection in eyoucms v1.7.1 allows remote attackers to cause a denial of service via crafted body of a POST request...

9.1CVSS7.3AI score0.00372EPSS
Exploits1References1
NVD
NVD
added 2025/12/03 9:15 p.m.6 views

CVE-2025-65868

XML external entity XXE injection in eyoucms v1.7.1 allows remote attackers to cause a denial of service via crafted body of a POST request...

9.1CVSS0.00372EPSS
Exploits1References1
OSV
OSV
added 2025/12/03 9:15 p.m.10 views

CVE-2025-65868

XML external entity XXE injection in eyoucms v1.7.1 allows remote attackers to cause a denial of service via crafted body of a POST request...

7.5CVSS5.9AI score0.00372EPSS
Exploits1References1
CVE
CVE
added 2025/12/03 12:0 a.m.16 views

CVE-2025-65868

CVE-2025-65868 affects eyoucms v1.7.1 and is caused by an XML External Entity (XXE) injection via crafted POST bodies, leading to DoS. Public sources (NVD, RH, EUVD, CNNVD, etc.) consistently cite XXE as the underlying issue with high/severe impact (CVE CVSS3.1: base 7.5/ HIGH; CNA 9.1/ CRITICAL ...

9.1CVSS6.8AI score0.00372EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/03 12:0 a.m.12 views

PT-2025-48995

Name of the Vulnerable Software and Affected Versions eyoucms version 1.7.1 Description The software is susceptible to an XML External Entity XXE injection. A remote attacker can exploit this by sending a specially crafted POST request body, potentially leading to a denial of service...

9.1CVSS6.9AI score0.00372EPSS
Exploits1References7
Cvelist
Cvelist
added 2025/12/03 12:0 a.m.22 views

CVE-2025-65868

XML external entity XXE injection in eyoucms v1.7.1 allows remote attackers to cause a denial of service via crafted body of a POST request...

0.00372EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/12/03 12:0 a.m.8 views

EyouCMS 安全漏洞

EyouCMS is an open source content management system CMS based on ThinkPHP by China Eyou Eyou. A security vulnerability exists in EyouCMS v1.7.1, which originates from XML external entity injection and could lead to a denial of service attack...

9.1CVSS6.9AI score0.00372EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/12/03 12:0 a.m.4 views

CVE-2025-65868

XML external entity XXE injection in eyoucms v1.7.1 allows remote attackers to cause a denial of service via crafted body of a POST request...

6.8AI score0.00372EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2020-13427

Malware in sbrugna...

8.8CVSS8.7AI score0.00573EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2019-7822

Malware in sbrugna...

6.1CVSS6.3AI score0.00977EPSS
Exploits0References3
Rows per page
Query Builder