EyouCMS SQL注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/Eyoucms/Eyoucms%201.4.2%20sql%E6%B3%A8%E5%85%A5/
• https://www.cnvd.org.cn/flaw/show/CNVD-2020-44391
• https://zhuji.jb51.net/qtcms/11487.html
• https://avd.aliyun.com/detail?id=AVD-2020-24000
• https://vulnerability.circl.lu/vuln/cnvd-2021-102420
• https://zone.ci/vulns/ys/350723.html
• https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/Eyoucms/Eyoucms%201.3.9%20%E5%89%8D%E5%8F%B0sql%E6%B3%A8%E5%85%A5/
• https://cn-sec.com/archives/3516389.html
• https://www.cnvd.org.cn/flaw/show/CNVD-2018-15269
• https://www.getmonero.us/down/www.0-sec.org/0day/Eyoucms/5.html

Related Vulnerabilities

• PoCCVE-2021-39501: EyouCMS 1.5.4 Open Redirect
• PoCCVE-2023-37645: EyouCms v1.6.3 - Information Disclosure
• PoCCVE-2023-41597: EyouCms v1.6.2 - Cross-Site Scripting
• PoCCVE-2024-22927: eyoucms v.1.6.5 - Cross-Site Scripting
• PoCeyoucms-installer: EyouCMS - Installation
• eyoucms 默认口令
• EyouCms 存在后台代码执行漏洞
• EyouCms 存在信息泄露漏洞（CVE-2023-37645）
• EyouCMS CVE-2021-46255 目录遍历漏洞
• Eyoucms 跨站请求伪造漏洞(CVE-2022-36225)
• Eyoucms 跨站脚本攻击漏洞(CVE-2022-35509)
• EyouCms login.php 存在登录绕过