Login Request a demo
WE
Vendor
weng-xianhu
1 product with CVEs on record
80
CVEs
0
On KEV
1
New 30D
Products
EY
EyouCMS
weng-xianhu
9.8
80 CVEs0 on KEV1 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-116094
New
EY
EyouCMS
Eyoucms
7.3
0%
Oct 25EyouCMS function.php remote_file_to_local server-side request forgery
CVE-2026-13569
EY
EyouCMS
weng-xianhu
4.7
0%
Jun 29weng-xianhu EyouCMS API index.php sql injection
CVE-2026-7389
EY
EyouCMS
Eyoucms
7.3
0%
Apr 29EyouCMS common.php GetSortData sql injection
CVE-2026-7388
EY
EyouCMS
Eyoucms
4.7
0%
Apr 29EyouCMS Template File FilemanagerLogic.php editFile code injection
CVE-2026-6561
EY
EyouCMS
Eyoucms
4.7
0%
Apr 19EyouCMS Index.php edit_adminlogo unrestricted upload
CVE-2026-1107
EY
EyouCMS
Eyoucms
9.8
1%
Jan 18EyouCMS Member Avatar Diyajax.php check_userinfo unrestricted upload
CVE-2025-15375
EY
EyouCMS
Eyoucms
8.8
0%
Dec 31EyouCMS arcpagelist Ajax.php unserialize deserialization
CVE-2025-15374
EY
EyouCMS
Eyoucms
5.4
0%
Dec 31EyouCMS Ask Module Ask.php cross site scripting
CVE-2025-15373
EY
EyouCMS
Eyoucms
4.3
0%
Dec 31EyouCMS function.php saveRemote server-side request forgery
CVE-2025-15143
EY
EyouCMS
Eyoucms
7.2
0%
Dec 28EyouCMS Backend Template Management FilemanagerLogic.php sql injection
CVE-2025-65868
EY
Eyoucms
Eyoucms
7.5
0%
Dec 3XML external entity (XXE) injection in eyoucms v1.7.1 allows remote attackers to cause a denial of service via crafted body of a POST request
CVE-2025-52335
EY
Eyoucms
Eyoucms
6.1
0%
Aug 14EyouCMS 1.7.3 is vulnerale to Cross Site Scripting (XSS) in index.php, which can be exploited to obtain sensitive information
CVE-2024-52680
EY
Eyoucms
Eyoucms
6.1
0%
Aug 7EyouCMS 1.6.7 is vulnerable to Cross Site Scripting (XSS) in /login.php?m=admin&c=System&a=web&lang=cn
CVE-2024-11211
EY
Eyoucms
Eyoucms
7.2
1%
Nov 14EyouCMS Website Logo unrestricted upload
CVE-2024-11210
EY
Eyoucms
Eyoucms
5.4
1%
Nov 14EyouCMS FilemanagerLogic.php editFile path traversal
CVE-2024-48196
EY
Eyoucms
Eyoucms
7.5
1%
Oct 28An issue in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to the post parameter
CVE-2024-48195
EY
Eyoucms
Eyoucms
6.1
0%
Oct 28Cross Site Scripting vulnerability in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to the post parameter
CVE-2024-3431
EY
Eyoucms
Eyoucms
8.8
1%
Apr 7EyouCMS Backend deserialization
CVE-2023-42286
EY
Eyoucms
Eyoucms
9.8
1%
Mar 14There is a PHP file inclusion vulnerability in the template configuration of eyoucms v1.6.4, allowing attackers to execute code or system commands through a carefully crafted…
CVE-2024-22927
EY
Eyoucms
Eyoucms
6.1
1%
Feb 1Cross Site Scripting (XSS) vulnerability in the func parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL
CVE-2024-23034
EY
Eyoucms
Eyoucms
6.1
0%
Feb 1Cross Site Scripting vulnerability in the input parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL
CVE-2024-23033
EY
Eyoucms
Eyoucms
6.1
0%
Feb 1Cross Site Scripting vulnerability in the path parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL
CVE-2024-23032
EY
Eyoucms
Eyoucms
6.1
0%
Feb 1Cross Site Scripting vulnerability in num parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL
CVE-2024-23031
EY
Eyoucms
Eyoucms
6.1
0%
Feb 1Cross Site Scripting (XSS) vulnerability in is_water parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL
CVE-2023-50566
EY
Eyoucms
Eyoucms
5.4
0%
Dec 14A stored cross-site scripting (XSS) vulnerability in EyouCMS-V1.6.5-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the…
CVE-2023-48880
EY
Eyoucms
Eyoucms
4.8
0%
Nov 29A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Menu…
CVE-2023-48882
EY
Eyoucms
Eyoucms
4.8
0%
Nov 29A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the…
CVE-2023-48881
EY
Eyoucms
Eyoucms
4.8
0%
Nov 29A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the…
CVE-2023-46935
EY
Eyoucms
Eyoucms
5.4
0%
Nov 21eyoucms v1.6.4 is vulnerable Cross Site Scripting (XSS), which can lead to stealing sensitive information of logged-in users
CVE-2023-41597
EY
Eyoucms
Eyoucms
6.1
1%
Nov 15EyouCms v1.6.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /admin/twitter.php?active_t
CVE-2023-37645
EY
Eyoucms
Eyoucms
5.3
25%
Jul 20eyoucms v1.6.3 was discovered to contain an information disclosure vulnerability via the component /custom_model_path/recruit.filelist.txt
CVE-2023-37136
EY
Eyoucms
Eyoucms
5.4
0%
Jul 6A stored cross-site scripting (XSS) vulnerability in the Basic Website Information module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted…
CVE-2023-37135
EY
Eyoucms
Eyoucms
5.4
0%
Jul 6A stored cross-site scripting (XSS) vulnerability in the Image Upload module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
CVE-2023-37134
EY
Eyoucms
Eyoucms
5.4
0%
Jul 6A stored cross-site scripting (XSS) vulnerability in the Basic Information module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
CVE-2023-37133
EY
Eyoucms
Eyoucms
5.4
0%
Jul 6A stored cross-site scripting (XSS) vulnerability in the Column management module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
CVE-2023-37132
EY
Eyoucms
Eyoucms
5.4
0%
Jul 6A stored cross-site scripting (XSS) vulnerability in the custom variables module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
CVE-2023-36093
EY
Eyoucms
Eyoucms
5.4
0%
Jun 22There is a storage type cross site scripting (XSS) vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3
CVE-2023-34657
EY
Eyoucms
Eyoucms
4.8
0%
Jun 19A stored cross-site scripting (XSS) vulnerability in Eyoucms v1.6.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the web_recordnum…
CVE-2023-33492
EY
Eyoucms
Eyoucms
5.4
0%
Jun 12EyouCMS 1.6.2 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-31708
EY
Eyoucms
Eyoucms
4.3
0%
May 23A Cross-Site Request Forgery (CSRF) in EyouCMS v1.6.2 allows attackers to execute arbitrary commands via a supplying a crafted HTML file to the Upload software format function
CVE-2023-30125
EY
Eyoucms
Eyoucms
6.1
0%
Apr 28EyouCms V1.6.1-UTF8-sp1 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-2058
EY
Eyoucms
Eyoucms
6.1
1%
Apr 14A vulnerability was found in EyouCms up to 1.6.2
CVE-2023-2057
EY
Eyoucms
Eyoucms
6.1
1%
Apr 14A vulnerability was found in EyouCms 1.5.4
CVE-2023-1799
EY
Eyoucms
Eyoucms
5.4
1%
Apr 2A vulnerability, which was classified as problematic, was found in EyouCMS up to 1.5.4
CVE-2023-1798
EY
Eyoucms
Eyoucms
5.4
1%
Apr 2A vulnerability, which was classified as problematic, has been found in EyouCMS up to 1.5.4
CVE-2022-45755
EY
Eyoucms
Eyoucms
5.4
0%
Feb 8Cross-site scripting (XSS) vulnerability in EyouCMS v1.6.0 allows attackers to execute arbitrary code via the home page description on the basic information page
CVE-2022-45542
EY
Eyoucms
Eyoucms
5.4
0%
Jan 20EyouCMS <= 1.6.0 was discovered a reflected-XSS in the FileManager component in GET parameter "filename" when editing any file
CVE-2022-45541
EY
Eyoucms
Eyoucms
6.1
0%
Jan 20EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article attribute editor component in POST value "value" if the value contains a non-integer char
CVE-2022-45540
EY
Eyoucms
Eyoucms
6.1
0%
Jan 20EyouCMS <= 1.6.0 was discovered a reflected-XSS in article type editor component in POST value "name" if the value contains a malformed UTF-8 char
CVE-2022-45539
EY
Eyoucms
Eyoucms
6.1
0%
Jan 20EyouCMS <= 1.6.0 was discovered a reflected-XSS in FileManager component in GET value "activepath" when creating a new file
CVE-2022-45538
EY
Eyoucms
Eyoucms
6.1
0%
Jan 20EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENV_GOBACK_URL"
CVE-2022-45537
EY
Eyoucms
Eyoucms
6.1
0%
Jan 20EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENV_LIST_URL"
CVE-2021-39428
EY
Eyoucms
Eyoucms
5.4
1%
Dec 15Cross Site Scripting (XSS) vulnerability in Users.php in eyoucms 1.5.4 allows remote attackers to run arbitrary code and gain escalated privilege via the filename for…
CVE-2022-45280
EY
Eyoucms
Eyoucms
5.4
0%
Nov 23A cross-site scripting (XSS) vulnerability in the Url parameter in /login.php of EyouCMS v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
CVE-2022-44390
EY
Eyoucms
Eyoucms
5.4
0%
Nov 14A cross-site scripting (XSS) vulnerability in EyouCMS V1.5.9-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Public…
CVE-2022-44389
EY
Eyoucms
Eyoucms
6.5
0%
Nov 14EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Edit Admin Profile module
CVE-2022-44387
EY
Eyoucms
Eyoucms
8.8
0%
Nov 14EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Basic Information component under the Edit Member module
CVE-2022-43323
EY
Eyoucms
Eyoucms
8.8
0%
Nov 14EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Top Up Balance component under the Edit Member module
CVE-2022-41500
EY
Eyoucms
Eyoucms
8.8
0%
Oct 18EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery (CSRF) vulnerabilities via the Members Center, Editorial Membership, and Points Recharge components
CVE-2022-36225
EY
Eyoucms
Eyoucms
8.8
0%
Aug 19EyouCMS V1.5.8-UTF8-SP1 is vulnerable to Cross Site Request Forgery (CSRF) via the background, column management function and add