Eyoucms 跨站请求伪造漏洞(CVE-2022-36225)

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://cve.imfht.com/detail/CVE-2022-36225
• http://202.112.51.190:8080/vuln/VHN-428093
• http://zone.ci/e/tags/?tagname=CVE-2022-36225
• https://cve.imfht.com/detail/CVE-2022-36225?lang=en
• https://vulnerability.circl.lu/vuln/cnvd-2022-59207
• http://zone.ci/vulns/ys/356288.html
• https://www.thehackerwire.com/vulnerability/CVE-2022-36225/
• https://github.com/weng-xianhu/eyoucms/issues/26
• https://scanrepeat.com/vulnerability-database/eyoucms-cross-site-request-forgery
• https://nvd.nist.gov/vuln/detail/CVE-2022-36225

Related Vulnerabilities

• EyouCMS SQL注入漏洞
• PoCCVE-2021-39501: EyouCMS 1.5.4 Open Redirect
• PoCCVE-2023-37645: EyouCms v1.6.3 - Information Disclosure
• PoCCVE-2023-41597: EyouCms v1.6.2 - Cross-Site Scripting
• PoCCVE-2024-22927: eyoucms v.1.6.5 - Cross-Site Scripting
• PoCeyoucms-installer: EyouCMS - Installation
• eyoucms 默认口令
• EyouCms 存在后台代码执行漏洞
• EyouCms 存在信息泄露漏洞（CVE-2023-37645）
• EyouCMS CVE-2021-46255 目录遍历漏洞
• Eyoucms 跨站脚本攻击漏洞(CVE-2022-35509)
• EyouCms login.php 存在登录绕过