768 matches found
CVE-2022-45540
Summary: CVE-2022-45540 affects EyouCMS versions up to 1.6.0 and is a reflected cross-site scripting (XSS) vulnerability in the article type editor component. The issue arises in the POST parameter name when the value contains a malformed UTF-8 character, enabling potential script injection. The ...
CVE-2022-45539
CVE-2022-45539 affects EyouCMS
PT-2023-14698 · Eyoucms · Eyoucms
Name of the Vulnerable Software and Affected Versions: EyouCMS versions prior to 1.6.0 Description: A reflected-XSS issue was discovered in the FileManager component. The issue occurs in the GET parameter filename when editing any file. Recommendations: For EyouCMS versions prior to 1.6.0, update...
EyouCMS 跨站脚本漏洞
Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology Company. A cross-site scripting vulnerability exists in EyouCMS version 1.6.0 and earlier versions, which originates from the filename GET parameter of t...
CVE-2022-45537
EyouCMS = 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENVLISTURL"...
CVE-2022-45537
EyouCMS = 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENVLISTURL"...
EyouCms 跨站脚本漏洞
Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology Company. A cross-site scripting vulnerability exists in EyouCMS version 1.6.0 and earlier versions, which stems from a reflective cross-site scripting...
CVE-2022-45537
CVE-2022-45537 affects EyouCMS versions
CVE-2022-45538
CVE-2022-45538 affects EyouCMS up to version 1.6.0, with a reflected-XSS vulnerability in the article publish component that uses the cookie value ENV_GOBACK_URL. The root cause is a failure to properly neutralize user-controlled input reflected from the ENV_GOBACK_URL cookie, enabling an attacke...
EyouCMS 跨站脚本漏洞
Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology Company. A cross-site scripting vulnerability exists in EyouCMS version 1.6.0 and earlier versions, which originates from the activepath GET parameter of...
CVE-2022-45540
EyouCMS = 1.6.0 was discovered a reflected-XSS in article type editor component in POST value "name" if the value contains a malformed UTF-8 char...
CVE-2022-45541
EyouCMS = 1.6.0 was discovered a reflected-XSS in the article attribute editor component in POST value "value" if the value contains a non-integer char...
CVE-2022-45542
EyouCMS = 1.6.0 was discovered a reflected-XSS in the FileManager component in GET parameter "filename" when editing any file...
PT-2023-14696 · Eyoucms · Eyoucms
Name of the Vulnerable Software and Affected Versions: EyouCMS versions prior to 1.6.0 Description: A reflected-XSS issue was discovered in the article type editor component. The issue occurs when the POST value name contains a malformed UTF-8 character. Recommendations: For EyouCMS versions prio...
CVE-2022-45539
EyouCMS = 1.6.0 was discovered a reflected-XSS in FileManager component in GET value "activepath" when creating a new file...
EyouCMS 跨站脚本漏洞
Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology Company. A cross-site scripting vulnerability exists in EyouCMS version 1.6.0 and earlier versions, which stems from a reflected cross-site scripting...
CVE-2022-45540
EyouCMS = 1.6.0 was discovered a reflected-XSS in article type editor component in POST value "name" if the value contains a malformed UTF-8 char...
CVE-2022-45542
CVE-2022-45542 affects EyouCMS versions prior to or equal to 1.6.0. The vulnerability is a reflected XSS in the FileManager component triggered via the GET parameter filename when editing any file. Root cause is reflected XSS from unsanitized filename input. Impact per sources is a low/none confi...
