eyoucms Vulnerability Advisory Catalog

Total 75 security vulnerabilities recorded for eyoucms software and firmware.

← Back to All Vendors
CVE-2026-1107 MEDIUM
Component: eyoucms

A weakness has been identified in EyouCMS up to 1.7.1/5.0. Impacted is the function check_userinfo of the file Diyajax.php of the component Member Ava...

📅 2026-01-18
CVSS 6.3 Dossier →
Component: eyoucms

A flaw has been found in EyouCMS up to 1.7.7. The impacted element is the function unserialize of the file application/api/controller/Ajax.php of the ...

📅 2025-12-31
CVSS 6.3 Dossier →
Component: eyoucms

A vulnerability was detected in EyouCMS up to 1.7.7. The affected element is an unknown function of the file application/home/model/Ask.php of the com...

📅 2025-12-31
CVSS 3.5 Dossier →
Component: eyoucms

A security vulnerability has been detected in EyouCMS up to 1.7.7. Impacted is the function saveRemote of the file application/function.php. Such mani...

📅 2025-12-31
CVSS 6.3 Dossier →
Component: eyoucms

A security flaw has been discovered in EyouCMS up to 1.7.6. The affected element is an unknown function of the file /application/admin/logic/Filemanag...

📅 2025-12-28
CVSS 4.7 Dossier →
Component: eyoucms

XML external entity (XXE) injection in eyoucms v1.7.1 allows remote attackers to cause a denial of service via crafted body of a POST request....

📅 2025-12-03
CVSS 7.5 Dossier →
Component: eyoucms

EyouCMS 1.7.3 is vulnerale to Cross Site Scripting (XSS) in index.php, which can be exploited to obtain sensitive information....

📅 2025-08-14
CVSS 6.1 Dossier →
Component: eyoucms

EyouCMS 1.6.7 is vulnerable to Cross Site Scripting (XSS) in /login.php?m=admin&c=System&a=web&lang=cn....

📅 2025-08-07
CVSS 6.1 Dossier →
Component: eyoucms

A vulnerability classified as critical has been found in EyouCMS up to 1.6.7. Affected is an unknown function of the component Website Logo Handler. T...

📅 2024-11-14
CVSS 4.7 Dossier →
Component: eyoucms

A vulnerability was found in EyouCMS 1.51. It has been rated as critical. This issue affects the function editFile of the file application/admin/logic...

📅 2024-11-14
CVSS 5.4 Dossier →
Component: eyoucms

An issue in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to the post parameter....

📅 2024-10-28
CVSS 7.5 Dossier →
Component: eyoucms

Cross Site Scripting vulnerability in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to the post parame...

📅 2024-10-28
CVSS 6.1 Dossier →
CVE-2024-3431 MEDIUM
Component: eyoucms

A vulnerability was found in EyouCMS 1.6.5. It has been declared as critical. This vulnerability affects unknown code of the file /login.php?m=admin&c...

📅 2024-04-07
CVSS 4.7 Dossier →
CVE-2023-42286 CRITICAL
Component: eyoucms

There is a PHP file inclusion vulnerability in the template configuration of eyoucms v1.6.4, allowing attackers to execute code or system commands thr...

📅 2024-03-14
CVSS 9.8 Dossier →
Component: eyoucms

Cross Site Scripting vulnerability in the input parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL....

📅 2024-02-01
CVSS 6.1 Dossier →
Component: eyoucms

Cross Site Scripting vulnerability in the path parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL....

📅 2024-02-01
CVSS 6.1 Dossier →
Component: eyoucms

Cross Site Scripting vulnerability in num parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL....

📅 2024-02-01
CVSS 6.1 Dossier →
Component: eyoucms

Cross Site Scripting (XSS) vulnerability in is_water parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL....

📅 2024-02-01
CVSS 6.1 Dossier →
Component: eyoucms

Cross Site Scripting (XSS) vulnerability in the func parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL....

📅 2024-02-01
CVSS 6.1 Dossier →
Component: eyoucms

A stored cross-site scripting (XSS) vulnerability in EyouCMS-V1.6.5-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted p...

📅 2023-12-14
CVSS 5.4 Dossier →
Component: eyoucms

A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted p...

📅 2023-11-29
CVSS 4.8 Dossier →
Component: eyoucms

A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted p...

📅 2023-11-29
CVSS 4.8 Dossier →
Component: eyoucms

A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted p...

📅 2023-11-29
CVSS 4.8 Dossier →
Component: eyoucms

eyoucms v1.6.4 is vulnerable Cross Site Scripting (XSS), which can lead to stealing sensitive information of logged-in users....

📅 2023-11-21
CVSS 5.4 Dossier →
Page 1 of 4 (75 Total Records)