CVE-2022-35509

CVE-2022-35509 is a Storage XSS in EyouCMS 1.5.8. The issue allows an attacker to inject a payload via the title parameter in the foreground contribution, enabling execution of arbitrary web scripts/HTML and potential exposure of sensitive information. Documents do not provide exploit code, affec...

CVE-2022-35509

An issue was discovered in EyouCMS 1.5.8. There is a Storage XSS vulnerability that can allows an attacker to execute arbitrary Web scripts or HTML by injecting a special payload via the title parameter in the foreground contribution, allowing the attacker to obtain sensitive information...

EyouCms Cross-Site Scripting Vulnerability (CNVD-2022-62185)

eyoucms is a content management system. A cross-site scripting vulnerability exists in the eyoucms login page, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to obtain sensitive information or hijack user sessions when malicious...

CVE-2022-33122

A stored cross-site scripting XSS vulnerability in eyoucms v1.5.6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL field under the login page...

CVE-2022-33122

A stored cross-site scripting XSS vulnerability in eyoucms v1.5.6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL field under the login page...

CVE-2022-33122

A stored cross-site scripting XSS vulnerability in eyoucms v1.5.6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL field under the login page...

Cross site scripting

A stored cross-site scripting XSS vulnerability in eyoucms v1.5.6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL field under the login page...

CVE-2022-33122

CVE-2022-33122 is a stored cross-site scripting (XSS) vulnerability in eyoucms v1.5.6. The issue allows an attacker to execute arbitrary web scripts or HTML by injecting a crafted payload into the URL field on the login page. This is the only detail provided across the connected sources; no explo...

CVE-2022-33122

A stored cross-site scripting XSS vulnerability in eyoucms v1.5.6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL field under the login page...

EyouCms 跨站脚本漏洞

eyoucms is a content management system. A cross-site scripting vulnerability exists in the eyoucms login page, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that can be used to obtain sensitive information or hijack user sessions when malicious...

CVE-2022-26273

EyouCMS v1.5.4 was discovered to lack parameter filtering in \user\controller\shop.php, leading to payment logic vulnerabilities...

CVE-2022-26273

EyouCMS v1.5.4 was discovered to lack parameter filtering in \user\controller\shop.php, leading to payment logic vulnerabilities...

Design/Logic Flaw

EyouCMS v1.5.4 was discovered to lack parameter filtering in \user\controller\shop.php, leading to payment logic vulnerabilities...

CVE-2022-26273

Summary: CVE-2022-26273 affects EyouCMS v1.5.4, due to lack of parameter filtering in the code path \user\controller\shop.php, which enables payment logic vulnerabilities. This vulnerability is documented across multiple sources (NVD, Red Hat, OSV, CVE lists) with a consistent description. The NV...

CVE-2022-26273

EyouCMS v1.5.4 was discovered to lack parameter filtering in \user\controller\shop.php, leading to payment logic vulnerabilities...

CVE-2022-26273

EyouCMS v1.5.4 was discovered to lack parameter filtering in \user\controller\shop.php, leading to payment logic vulnerabilities...

EyouCms 安全漏洞

Zanzan Network Technology EyouCms Eyou CMS is a set of open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCms v1.5.4, which originates from the lack of parameter filtering in usercontrollershop.php...

CVE-2022-26279

EyouCMS v1.5.5 was discovered to have no access control in the component /data/sqldata...

CVE-2022-26279

EyouCMS v1.5.5 was discovered to have no access control in the component /data/sqldata...

CVE-2022-26279

EyouCMS v1.5.5 was discovered to have no access control in the component /data/sqldata...