Show filters
63 Total Results
Displaying 31-40 of 63
Sort by:
Attacker Value
Unknown
CVE-2022-45541
Disclosure Date: January 20, 2023 (last updated October 08, 2023)
EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article attribute editor component in POST value "value" if the value contains a non-integer char.
0
Attacker Value
Unknown
CVE-2022-45540
Disclosure Date: January 20, 2023 (last updated October 08, 2023)
EyouCMS <= 1.6.0 was discovered a reflected-XSS in article type editor component in POST value "name" if the value contains a malformed UTF-8 char.
0
Attacker Value
Unknown
CVE-2022-45539
Disclosure Date: January 20, 2023 (last updated October 08, 2023)
EyouCMS <= 1.6.0 was discovered a reflected-XSS in FileManager component in GET value "activepath" when creating a new file.
0
Attacker Value
Unknown
CVE-2022-45538
Disclosure Date: January 20, 2023 (last updated October 08, 2023)
EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENV_GOBACK_URL".
0
Attacker Value
Unknown
CVE-2022-45537
Disclosure Date: January 20, 2023 (last updated October 08, 2023)
EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENV_LIST_URL".
0
Attacker Value
Unknown
CVE-2021-39428
Disclosure Date: December 15, 2022 (last updated February 24, 2025)
Cross Site Scripting (XSS) vulnerability in Users.php in eyoucms 1.5.4 allows remote attackers to run arbitrary code and gain escalated privilege via the filename for edit_users_head_pic.
0
Attacker Value
Unknown
CVE-2022-45280
Disclosure Date: November 23, 2022 (last updated February 24, 2025)
A cross-site scripting (XSS) vulnerability in the Url parameter in /login.php of EyouCMS v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
0
Attacker Value
Unknown
CVE-2022-44389
Disclosure Date: November 14, 2022 (last updated February 24, 2025)
EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Edit Admin Profile module. This vulnerability allows attackers to arbitrarily change Administrator account information.
0
Attacker Value
Unknown
CVE-2022-44390
Disclosure Date: November 14, 2022 (last updated February 24, 2025)
A cross-site scripting (XSS) vulnerability in EyouCMS V1.5.9-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Public Security Record Number text field.
0
Attacker Value
Unknown
CVE-2022-44387
Disclosure Date: November 14, 2022 (last updated February 24, 2025)
EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Basic Information component under the Edit Member module.
0
