CVE-2021-39497

eyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject a url to trigger blind SSRF via the saveRemote function...

CVE-2021-39497: Server-Side Request Forgery (SSRF)

eyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject a url to trigger blind SSRF via the saveRemote function...

PT-2021-22593

Name of the Vulnerable Software and Affected Versions: eyoucms version 1.5.4 Description: The issue lacks sanitization of input data, allowing an attacker to inject a URL and trigger blind Server-Side Request Forgery SSRF via the saveRemote function. Recommendations: For eyoucms version 1.5.4, as...

EyouCms代码问题漏洞

EyouCms is a free and open source enterprise content management system based on the TP5.0 framework and focused on the needs of enterprise website builders.EyouCMS version 1.5.4 is vulnerable to server-side request forgery. The vulnerability stems from the lack of validation of input data in...