CVE-2023-33492

EyouCMS 1.6.2 is vulnerable to Cross Site Scripting XSS...

CVE-2023-33492

CVE-2023-33492 affects EyouCMS 1.6.2 and is a Cross-Site Scripting (XSS) vulnerability. The provided documents consistently cite XSS in EyouCMS 1.6.2 as the issue; no explicit root-cause, affected components, or exploit details are documented beyond the generic XSS description. Public exploit/wor...

CVE-2023-31708

A Cross-Site Request Forgery CSRF in EyouCMS v1.6.2 allows attackers to execute arbitrary commands via a supplying a crafted HTML file to the Upload software format function...

CVE-2023-31708

A Cross-Site Request Forgery CSRF in EyouCMS v1.6.2 allows attackers to execute arbitrary commands via a supplying a crafted HTML file to the Upload software format function...

CVE-2023-31708

A Cross-Site Request Forgery CSRF in EyouCMS v1.6.2 allows attackers to execute arbitrary commands via a supplying a crafted HTML file to the Upload software format function...

Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF in EyouCMS v1.6.2 allows attackers to execute arbitrary commands via a supplying a crafted HTML file to the Upload software format function...

CVE-2023-31708

A Cross-Site Request Forgery CSRF in EyouCMS v1.6.2 allows attackers to execute arbitrary commands via a supplying a crafted HTML file to the Upload software format function...

PT-2023-23427 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: EyouCMS version 1.6.2 Description: A Cross-Site Request Forgery CSRF issue allows attackers to execute arbitrary commands by supplying a crafted HTML file to the Upload software format function. Recommendations: For EyouCMS version 1.6.2,...

EyouCMS 跨站请求伪造漏洞

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCMS v1.6.2, which originated from allowing an attacker to execute arbitrary commands by uploading a carefully...

CVE-2023-31708

A Cross-Site Request Forgery CSRF in EyouCMS v1.6.2 allows attackers to execute arbitrary commands via a supplying a crafted HTML file to the Upload software format function...

CVE-2023-31708

EyouCMS v1.6.2 contains a CSRF vulnerability in the Upload software format function that allows an attacker to execute arbitrary commands when a crafted HTML file is supplied. Documented entries consistently describe the issue as CSRF affecting EyouCMS 1.6.2 with a potential for command execution...

EyouCms Cross-Site Scripting Vulnerability (CNVD-2023-36287)

EyouCms is an open source content management system CMS based on ThinkPHP. A cross-site scripting vulnerability exists in EyouCms version V1.6.1-UTF8-sp1. The vulnerability stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an...

CVE-2023-30125

EyouCms V1.6.1-UTF8-sp1 is vulnerable to Cross Site Scripting XSS...

CVE-2023-30125

EyouCms V1.6.1-UTF8-sp1 is vulnerable to Cross Site Scripting XSS...

Cross site scripting

EyouCms V1.6.1-UTF8-sp1 is vulnerable to Cross Site Scripting XSS...

CVE-2023-30125

EyouCms V1.6.1-UTF8-sp1 is vulnerable to Cross Site Scripting XSS...

EyouCms 跨站脚本漏洞

EyouCms is an open source content management system CMS based on ThinkPHP. A cross-site scripting vulnerability exists in EyouCms version V1.6.1-UTF8-sp1. The vulnerability stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an...

CVE-2023-30125

EyouCms V1.6.1-UTF8-sp1 is vulnerable to Cross Site Scripting XSS...

CVE-2023-30125

Summary: CVE-2023-30125 affects EyouCms V1.6.1-UTF8-sp1 and is a Cross-Site Scripting (XSS) vulnerability. Multiple sources (CNVD/CNNVD/etc.) describe an XSS flaw arising from insufficient input filtering/escaping of user-supplied data. The NVD/CVE records list a CVSS v3.1 base score of 6.1 (Medi...

PT-2023-22548 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: EyouCms version 1.6.1-UTF8-sp1 Description: The issue is related to Cross Site Scripting XSS, which is a type of attack where an attacker injects malicious scripts into a website, allowing them to steal user data or take control of the user's...