Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown
CVE-2022-44389
Disclosure Date: November 14, 2022 (last updated February 24, 2025)
EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Edit Admin Profile module. This vulnerability allows attackers to arbitrarily change Administrator account information.
0
Attacker Value
Unknown
CVE-2022-44390
Disclosure Date: November 14, 2022 (last updated February 24, 2025)
A cross-site scripting (XSS) vulnerability in EyouCMS V1.5.9-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Public Security Record Number text field.
0
Attacker Value
Unknown
CVE-2022-44387
Disclosure Date: November 14, 2022 (last updated February 24, 2025)
EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Basic Information component under the Edit Member module.
0
Attacker Value
Unknown
CVE-2022-43323
Disclosure Date: November 14, 2022 (last updated February 24, 2025)
EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Top Up Balance component under the Edit Member module.
0
Attacker Value
Unknown
CVE-2022-41500
Disclosure Date: October 18, 2022 (last updated February 24, 2025)
EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery (CSRF) vulnerabilities via the Members Center, Editorial Membership, and Points Recharge components.
0
