CVE-2020-20645: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability exists in EyouCMS1.3.6 in the basicinformation area...

CVE-2020-20642: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF vulnerability exists in EyouCMS 1.3.6 that can add an htm page to execute the js code via login.php?m=admin&c=Filemanager&a=newfile&lang=cn...

Eyoucms Cross-Site Scripting Vulnerability (CNVD-2022-13193)

Zanzan Network Technology EyouCms EyouCms is a ThinkPHP-based open source content management system CMS from Zanzan Network Technology in China.Eyoucms 1.4.7 and previous versions have a cross-site scripting vulnerability, which stems from the fact that the addonfieldext parameter is not validate...

PT-2021-10519

Name of the Vulnerable Software and Affected Versions: EyouCMS version 1.3.6 Description: A Cross Site Request Forgery CSRF issue exists, allowing an attacker to add an htm page that can execute js code via the login.php endpoint with specific parameters: m=admin, c=Filemanager, a=newfile, and...

CVE-2020-19669

Cross Site Request Forgery CSRF vulnerability exists in Eyoucms 1.3.6 that can add an admin account via /login.php?m=admin&c=Admin&a=adminadd&lang=cn...

CVE-2020-19669

Cross Site Request Forgery CSRF vulnerability exists in Eyoucms 1.3.6 that can add an admin account via /login.php?m=admin&c=Admin&a=adminadd&lang=cn...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability exists in Eyoucms 1.3.6 that can add an admin account via /login.php?m=admin&c=Admin&a=adminadd&lang=cn...

CVE-2020-19669

Cross Site Request Forgery CSRF vulnerability exists in Eyoucms 1.3.6 that can add an admin account via /login.php?m=admin&c=Admin&a=adminadd&lang=cn...

CVE-2020-19669

Cross Site Request Forgery CSRF vulnerability exists in Eyoucms 1.3.6 that can add an admin account via /login.php?m=admin&c=Admin&a=adminadd&lang=cn...

CVE-2020-19669

CVE-2020-19669 is a CSRF vulnerability in EyouCMS 1.3.6 that allows an attacker to add an admin account via crafted requests to login.php?m=admin&c=Admin&a=admin_add&lang=cn. Affected software: EyouCMS 1.3.6. Root cause: insufficient verification of that requests come from trusted users. Impact: ...

CVE-2020-28146

Cross Site Scripting XSS vulnerability exists in Eyoucms v1.4.7 and earlier via the addonfieldext parameter...

CVE-2020-28146

Cross Site Scripting XSS vulnerability exists in Eyoucms v1.4.7 and earlier via the addonfieldext parameter...

Cross site scripting

Cross Site Scripting XSS vulnerability exists in Eyoucms v1.4.7 and earlier via the addonfieldext parameter...

CVE-2020-28146

Cross Site Scripting XSS vulnerability exists in Eyoucms v1.4.7 and earlier via the addonfieldext parameter...

CVE-2020-28146

CVE-2020-28146 affects Eyoucms up to v1.4.7. The vulnerability is a Cross Site Scripting (XSS) flaw triggered via the addonfieldext parameter, stemming from lack of validation/escaping. Documented impact is client-side script execution with potential partial integrity impact (per CVSS metrics: CV...

CVE-2020-19669: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF vulnerability exists in Eyoucms 1.3.6 that can add an admin account via /login.php?m=admin&c=Admin&a=adminadd&lang=cn...

CVE-2020-28146: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability exists in Eyoucms v1.4.7 and earlier via the addonfieldext parameter...

PT-2021-10386

Name of the Vulnerable Software and Affected Versions: Eyoucms version 1.3.6 Description: A Cross Site Request Forgery CSRF issue exists, allowing an attacker to add an admin account via the /login.php?m=admin&c=Admin&a=admin add&lang=cn API endpoint. This can be exploited by manipulating the m, ...

PT-2021-11450

Name of the Vulnerable Software and Affected Versions: Eyoucms versions 1.4.7 and earlier Description: A Cross Site Scripting XSS issue exists via the addonfieldext parameter. This allows for potential malicious script execution. Recommendations: For Eyoucms versions 1.4.7 and earlier, consider...

EyouCms 跨站请求伪造漏洞

Eyoucms is an open source content management system CMS based on ThinkPHP. eyoucms has a cross-site request forgery vulnerability in version 1.3.6, which stems from a WEB application that does not sufficiently verify that requests come from trusted users. An attacker can use the forged malicious...