Advisories · Technology
EyouCMS.
Every CVE that names EyouCMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
EyouCMS function.php remote_file_to_local server-side request forgery
- EyouCMS
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
EyouCMS common.php GetSortData sql injection
- EyouCMS
- Other injection
- SQL injection
- CVSS 5.1 Medium
EyouCMS Template File FilemanagerLogic.php editFile code injection
- EyouCMS
- Other injection
- Code injection
- CVSS 5.1 Medium
EyouCMS Index.php edit_adminlogo unrestricted upload
- EyouCMS
- Broken access control
- Unrestricted file upload
- CVSS 5.3 Medium
EyouCMS Member Avatar Diyajax.php check_userinfo unrestricted upload
- EyouCMS
- Broken access control
- Unrestricted file upload
- CVSS 5.3 Medium
EyouCMS arcpagelist Ajax.php unserialize deserialization
- EyouCMS
- Insecure deserialization
- CWE-20
- CVSS 5.1 Medium
EyouCMS Ask Module Ask.php cross site scripting
- EyouCMS
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
EyouCMS function.php saveRemote server-side request forgery
- EyouCMS
- Server-side request forgery (SSRF)
- CVSS 5.1 Medium
EyouCMS Backend Template Management FilemanagerLogic.php sql injection
- EyouCMS
- Other injection
- SQL injection
- CVSS 5.1 Medium
EyouCMS Website Logo unrestricted upload
- EyouCMS
- Broken access control
- Unrestricted file upload
- CVSS 5.3 Medium
EyouCMS FilemanagerLogic.php editFile path traversal
- EyouCMS
- Path traversal
- CVSS 4.7 Medium
EyouCMS Backend deserialization
- EyouCMS
- Insecure deserialization
- CVSS 2.4 Low
EyouCms HTTP POST Request cross site scripting
- EyouCms
- Cross-site scripting (XSS)
- CVSS 2.4 Low
EyouCms New Picture cross site scripting
- EyouCms
- Cross-site scripting (XSS)
- CVSS 3.5 Low
EyouCMS login.php cross site scripting
- EyouCMS
- Cross-site scripting (XSS)
- CVSS 3.5 Low
EyouCMS login.php cross site scripting
- EyouCMS
- Cross-site scripting (XSS)