CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 07/09/2021 |
| CVE-2021-39499 | 中危6.1 | A Cross-site scripting (XSS) vulnerability in Users in Qiong ICP EyouCMS 1.5.4 allows remote attackers to inject arbitrary web script or HTML via the `title` parameter in bind_email function. | 07/09/2021 |
| CVE-2021-39497 | 严重9.8 | eyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject a url to trigger blind SSRF via the saveRemote() function. | 07/09/2021 |
| CVE-2021-39496 | 中危5.4 | Eyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject malicious code into `filename` param to trigger Reflected XSS. | 07/09/2021 |
| CVE-2020-20645 | 中危5.4 | Cross Site Scripting (XSS) vulnerability exists in EyouCMS1.3.6 in the basic_information area. | 19/08/2021 |
| CVE-2020-20642 | 高危8.8 | Cross Site Request Forgery (CSRF) vulnerability exists in EyouCMS 1.3.6 that can add an htm page to execute the js code via login.php?m=admin&c=Filemanager&a=newfile&lang=cn. | 19/08/2021 |
| CVE-2020-19669 | 高危8.8 | Cross Site Request Forgery (CSRF) vulnerability exists in Eyoucms 1.3.6 that can add an admin account via /login.php?m=admin&c=Admin&a=admin_add&lang=cn. | 18/08/2021 |
| CVE-2020-28146 | 中危6.1 | Cross Site Scripting (XSS) vulnerability exists in Eyoucms v1.4.7 and earlier via the addonfieldext parameter. | 18/08/2021 |
| CVE-2020-21930 | 中危5.4 | A stored cross site scripting (XSS) vulnerability in the web_attr_2 field of Eyoucms v1.4.1 allows authenticated attackers to execute arbitrary web scripts or HTML. | 10/08/2021 |
| CVE-2020-21929 | 中危5.4 | A stored cross site scripting (XSS) vulnerability in the web_copyright field of Eyoucms v1.4.1 allows authenticated attackers to execute arbitrary web scripts or HTML. | 10/08/2021 |
| CVE-2020-18129 | 高危8.8 | A CSRF vulnerability in Eyoucms v1.2.7 allows an attacker to add an admin account via login.php. | 22/10/2020 |
| CVE-2019-17430 | 中危6.1 | EyouCms through 2019-07-11 has XSS related to the login.php web_recordnum parameter. | 10/10/2019 |