905 matches found
Command Execution Vulnerability in EyouCms (CNVD-2021-51836)
EyouCms is based on TP5.0 framework for the core development of free open source enterprise content management system. EyouCms has a command execution vulnerability. An attacker can exploit the vulnerability to execute commands and gain server privileges...
Eyoucms suffers from XML entity injection vulnerability
EyouCms is a free and open source enterprise content management system based on the TP5.0 framework as the core development. EyouCms XML entity injection vulnerability , attackers can exploit the vulnerability to obtain sensitive information...
Command Execution Vulnerability in EyouCms (CNVD-2021-41520)
EyouCms is based on the TP5.0 framework for the core development of free open source enterprise content management system, focusing on enterprise station user needs, providing a large number of templates in various industries, reducing the construction of small and medium-sized enterprises, netwo...
Command Execution Vulnerability in EyouCms (CNVD-2021-26099)
EyouCms is based on TP5.0 framework for the core development of free open source enterprise content management system. EyouCms has a command execution vulnerability. An attacker can exploit the vulnerability to execute commands and gain server privileges...
File upload vulnerability in EyouCms (CNVD-2021-26007)
EyouCms is a free and open source enterprise content management system based on the TP5.0 framework as the core development. EyouCms has a file upload vulnerability that can be exploited by attackers to gain control of the web server...
Command Execution Vulnerability in EyouCms
EyouCms is based on TP5.0 framework for the core development of free open source enterprise content management system. EyouCms has a command execution vulnerability. An attacker can exploit the vulnerability to execute commands and gain server privileges...
Logic flaw vulnerability in EyouCms (CNVD-2021-03385)
EyouCms is an enterprise building system that focuses on enterprise website construction. EyouCms has a logic flaw vulnerability that can be exploited by attackers to cause a denial of service...
CVE-2020-18129
A CSRF vulnerability in Eyoucms v1.2.7 allows an attacker to add an admin account via login.php...
CVE-2020-18129
A CSRF vulnerability in Eyoucms v1.2.7 allows an attacker to add an admin account via login.php...
Cross site request forgery (csrf)
A CSRF vulnerability in Eyoucms v1.2.7 allows an attacker to add an admin account via login.php...
CVE-2020-18129
A CSRF vulnerability in Eyoucms v1.2.7 allows an attacker to add an admin account via login.php...
CVE-2020-18129
CSRF in Eyoucms v1.2.7 allows an attacker to add an admin account via login.php. The issue affects the authentication flow and can lead to privilege elevation to admin as described in multiple references. The sources do not specify a confirmed patch version or remediation steps; monitor for offic...
PT-2020-15085
Name of the Vulnerable Software and Affected Versions Eyoucms version 1.2.7 Description A CSRF issue allows an attacker to add an admin account via the "login.php" endpoint. This can be exploited to gain unauthorized access to the system. Recommendations For Eyoucms version 1.2.7, consider...
CVE-2020-18129: Cross-Site Request Forgery (CSRF)
A CSRF vulnerability in Eyoucms v1.2.7 allows an attacker to add an admin account via login.php...
File upload vulnerability in EyouCms of Hainan Zanzan Network Technology Co. Ltd (CNVD-2020-50721)
EyouCms is a free + open source enterprise content management system developed on the core of TP5.0 framework. A file upload vulnerability exists in EyouCms of Hainan Zanzan Network Technology Co. An attacker can exploit the vulnerability to upload webshell and gain server privileges...
XSS Vulnerability in EyouCms of Hainan Zanzan Network Technology Co.
Hainan Zanzan Network Technology Co., Ltd. station-building system EyouCms is based on the TP5.0 framework for the core development of free + open source enterprise content management system, focusing on enterprise station-building user needs, to provide a large number of templates in various...
Command Execution Vulnerability in EyouCms Backend
EyouCms is a free + open source enterprise content management system developed on the core of TP5.0 framework. EyouCms backend has a command execution vulnerability. An attacker can exploit the vulnerability to execute commands and gain server privileges...
Command Execution Vulnerability in EyouCms of Hainan Zanzan Network Technology Co. Ltd (CNVD-2020-47671)
EyouCms is a free + open source enterprise content management system developed on the core of TP5.0 framework. Hainan Zanzan Network Technology Co., Ltd. EyouCms there is a command execution vulnerability, attackers can use the vulnerability to obtain control of the web server...
EyouCms has a logic flaw vulnerability
EyouCms is a free + open source enterprise content management system developed on the core of TP5.0 framework. EyouCms has a logic flaw vulnerability that can be exploited by attackers to obtain server administrative privileges...