EyouCMS 路径遍历漏洞

EyouCMS is an open source content management system CMS based on ThinkPHP by China Eyou Eyou Company. A path traversal vulnerability exists in EyouCMS version 1.51, which originates from a path traversal issue in the activepath parameter of the editFile function on the...

PT-2024-16828 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: EyouCMS version 1.51 Description: A critical issue affects the function editFile of the file application/admin/logic/FilemanagerLogic.php. The manipulation of the argument activepath leads to path traversal. The attack may be initiated...

CVE-2024-48196

An issue in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to the post parameter...

CVE-2024-48195

Cross Site Scripting vulnerability in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to the post parameter...

CVE-2024-48195

Cross Site Scripting vulnerability in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to the post parameter...

CVE-2024-48196

An issue in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to the post parameter...

EyouCms 安全漏洞

EyouCms is an open source content management system CMS based on ThinkPHP by China Eyou Eyou. A security vulnerability exists in EyouCMS v1.6.7, which stems from the presence of a cross-site scripting vulnerability that allows remote attackers to obtain sensitive information by scripting the post...

CVE-2024-48196

An issue in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to the post parameter...

CVE-2024-48195

Cross Site Scripting vulnerability in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to the post parameter...

PT-2024-33019 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: eyouCMS version 1.6.7 Description: The issue allows a remote attacker to obtain sensitive information by sending a crafted script to the post parameter. Recommendations: For eyouCMS version 1.6.7, consider restricting access to the post...

EyouCms 安全漏洞

EyouCms is an open source content management system CMS based on ThinkPHP by China's Eyou Eyou. A security vulnerability exists in EyouCMS v1.6.7, which originated from allowing remote attackers to obtain sensitive information by scripting the post parameters...

CVE-2024-48196

An issue in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to the post parameter...

CVE-2024-48196

CVE-2024-48196 affects eyouCMS v1.6.7. The vulnerability allows remote attackers to obtain sensitive information by sending a crafted script to the post parameter, with CVSSv3.1 base score 7.5 (HIGH, NETWORK, exploitation likely). Affected component is the post parameter handling in eyouCMS; root...

CVE-2024-48195

Cross Site Scripting vulnerability in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to the post parameter...

PT-2024-33018 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: eyouCMS version 1.6.7 Description: A Cross Site Scripting issue allows a remote attacker to obtain sensitive information by sending a crafted script to the post parameter. Recommendations: For eyouCMS version 1.6.7, update to a newer version...

CVE-2024-48195

The CVE-2024-48195 entry concerns an XSS vulnerability in eyouCMS v1.6.7 that enables an attacker to disclose sensitive information by crafting a script to the post parameter. Public records in multiple sources confirm the flaw and context, describing a Cross Site Scripting issue that leads to in...

EyouCMS Deserialization Vulnerability

EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP. EyouCMS version 1.6.5 has a deserialization vulnerability, the vulnerability stems from the unsafe deserialization of the parameter channelid of the file /login.php in the receipt of user-submitted serialized data...

CVE-2024-3431

A vulnerability was found in EyouCMS 1.6.5. It has been declared as critical. This vulnerability affects unknown code of the file /login.php?m=admin&c=Field&a=channeledit of the component Backend. The manipulation of the argument channelid leads to deserialization. The attack can be initiated...

CVE-2024-3431

A vulnerability was found in EyouCMS 1.6.5. It has been declared as critical. This vulnerability affects unknown code of the file /login.php?m=admin&c=Field&a=channeledit of the component Backend. The manipulation of the argument channelid leads to deserialization. The attack can be initiated...

CVE-2024-3431

CVE-2024-3431 (EyouCMS 1.6.5) involves a deserialization vulnerability in the Backend at the file path /login.php?m=admin&c=Field&a=channel_edit, where manipulating the argument channel_id leads to code execution. The issue is exploitable remotely and has public exploits/disclosures. Multiple sou...