CVE-2020-19669

Cross Site Request Forgery CSRF vulnerability exists in Eyoucms 1.3.6 that can add an admin account via /login.php?m=admin&c=Admin&a=adminadd&lang=cn...

CVE-2020-19669

Cross Site Request Forgery CSRF vulnerability exists in Eyoucms 1.3.6 that can add an admin account via /login.php?m=admin&c=Admin&a=adminadd&lang=cn...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability exists in Eyoucms 1.3.6 that can add an admin account via /login.php?m=admin&c=Admin&a=adminadd&lang=cn...

CVE-2020-19669

Cross Site Request Forgery CSRF vulnerability exists in Eyoucms 1.3.6 that can add an admin account via /login.php?m=admin&c=Admin&a=adminadd&lang=cn...

CVE-2020-19669

CVE-2020-19669 is a CSRF vulnerability in EyouCMS 1.3.6 that allows an attacker to add an admin account via crafted requests to login.php?m=admin&c=Admin&a=admin_add&lang=cn. Affected software: EyouCMS 1.3.6. Root cause: insufficient verification of that requests come from trusted users. Impact: ...

CVE-2020-28146

Cross Site Scripting XSS vulnerability exists in Eyoucms v1.4.7 and earlier via the addonfieldext parameter...

CVE-2020-28146

Cross Site Scripting XSS vulnerability exists in Eyoucms v1.4.7 and earlier via the addonfieldext parameter...

Cross site scripting

Cross Site Scripting XSS vulnerability exists in Eyoucms v1.4.7 and earlier via the addonfieldext parameter...

CVE-2020-28146

Cross Site Scripting XSS vulnerability exists in Eyoucms v1.4.7 and earlier via the addonfieldext parameter...

CVE-2020-28146

CVE-2020-28146 affects Eyoucms up to v1.4.7. The vulnerability is a Cross Site Scripting (XSS) flaw triggered via the addonfieldext parameter, stemming from lack of validation/escaping. Documented impact is client-side script execution with potential partial integrity impact (per CVSS metrics: CV...

EyouCms 跨站请求伪造漏洞

Eyoucms is an open source content management system CMS based on ThinkPHP. eyoucms has a cross-site request forgery vulnerability in version 1.3.6, which stems from a WEB application that does not sufficiently verify that requests come from trusted users. An attacker can use the forged malicious...

EyouCms 跨站脚本漏洞

Zanzan Network Technology EyouCms EyouCms is a ThinkPHP-based open source content management system CMS from Zanzan Network Technology in China.Eyoucms 1.4.7 and previous versions have a cross-site scripting vulnerability, which stems from the fact that the addonfieldext parameter is not validate...

EyouCms Cross-Site Scripting Vulnerability

EyouCms EyouCms is a ThinkPHP-based open source content management system CMS from Hainan Zanzan Network Technology Co. An attacker can use the vulnerability to execute arbitrary web scripts or HTML...

Eyoucms Cross-Site Scripting Vulnerability (CNVD-2022-13194)

Zanzan Network Technology EyouCms EyouCms is a ThinkPHP-based open source content management system CMS from Zanzan Network Technology in China. version v1.4.1 of Eyoucms has a security vulnerability. An attacker can use the vulnerability to execute arbitrary web scripts or HTML...

CVE-2020-21929

A stored cross site scripting XSS vulnerability in the webcopyright field of Eyoucms v1.4.1 allows authenticated attackers to execute arbitrary web scripts or HTML...

CVE-2020-21930

A stored cross site scripting XSS vulnerability in the webattr2 field of Eyoucms v1.4.1 allows authenticated attackers to execute arbitrary web scripts or HTML...

CVE-2020-21929

A stored cross site scripting XSS vulnerability in the webcopyright field of Eyoucms v1.4.1 allows authenticated attackers to execute arbitrary web scripts or HTML...

CVE-2020-21930

A stored cross site scripting XSS vulnerability in the webattr2 field of Eyoucms v1.4.1 allows authenticated attackers to execute arbitrary web scripts or HTML...

Cross site scripting

A stored cross site scripting XSS vulnerability in the webattr2 field of Eyoucms v1.4.1 allows authenticated attackers to execute arbitrary web scripts or HTML...

Cross site scripting

A stored cross site scripting XSS vulnerability in the webcopyright field of Eyoucms v1.4.1 allows authenticated attackers to execute arbitrary web scripts or HTML...