Eyoucms
51 CVEs tracked since 2021. Since Aug 2021, none of them reached CISA KEV.
Eyoucms CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2021-08 | 6 | 0 |
| 2021-09 | 5 | 0 |
| 2021-10 | 2 or fewer | |
| 2021-11 | 2 or fewer | |
| 2021-12 | 2 or fewer | |
| 2022-01 | 2 or fewer | |
| 2022-02 | 2 or fewer | |
| 2022-03 | 3 | 0 |
| 2022-04 | 3 or fewer | |
| 2022-05 | 3 or fewer | |
| 2022-06 | 3 or fewer | |
| 2022-07 | 3 or fewer | |
| 2022-08 | 3 or fewer | |
| 2022-09 | 3 or fewer | |
| 2022-10 | 2 or fewer | |
| 2022-11 | 5 | 0 |
| 2022-12 | 3 or fewer | |
| 2023-01 | 6 | 0 |
| 2023-02 | 3 or fewer | |
| 2023-03 | no snapshot | |
| 2023-04 | 5 | 0 |
| 2023-05 | 3 or fewer | |
| 2023-06 | 4 or fewer | |
| 2023-07 | 6 | 0 |
| 2023-08 | 4 or fewer | |
| 2023-09 | 3 or fewer | |
| 2023-10 | 4 or fewer | |
| 2023-11 | 5 | 0 |
| 2023-12 | 4 or fewer | |
| 2024-01 | 4 or fewer | |
| 2024-02 | 5 | 0 |
| 2024-03 | 4 or fewer | |
| 2024-04 | 4 or fewer | |
| 2024-05 | 5 or fewer | |
| 2024-06 | 4 or fewer | |
| 2024-07 | 4 or fewer | |
| 2024-08 | 4 or fewer | |
| 2024-09 | 3 or fewer | |
| 2024-10 | 4 or fewer | |
| 2024-11 | 4 or fewer | |
| 2024-12 | 3 or fewer | |
| 2025-01 | 4 or fewer | |
| 2025-02 | 3 or fewer | |
| 2025-03 | 5 or fewer | |
| 2025-04 | 4 or fewer | |
| 2025-05 | 4 or fewer | |
| 2025-06 | 4 or fewer | |
| 2025-07 | 5 or fewer | |
| 2025-08 | 4 or fewer | |
| 2025-09 | 4 or fewer | |
| 2025-10 | 4 or fewer | |
| 2025-11 | 4 or fewer | |
| 2025-12 | 5 | 0 |
| 2026-01 | 5 or fewer | |
| 2026-02 | 5 or fewer | |
| 2026-03 | 7 or fewer | |
| 2026-04 | 6 or fewer | |
| 2026-05 | 7 or fewer | |
| 2026-06 | 7 or fewer | |
| 2026-07 | 7 or fewer | |
| 2026-08 | 8 or fewer | |
| 2026-09 | 9 or fewer | |
| 2026-10 | 6 or fewer |
Products
The products that kept showing up in Eyoucms's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Eyoucms.
- CVE-2026-1107EyouCMS Member Avatar Diyajax.php check_userinfo unrestricted upload6.3
- CVE-2025-15375EyouCMS arcpagelist Ajax.php unserialize deserialization6.3
- CVE-2025-15374EyouCMS Ask Module Ask.php cross site scripting3.5
- CVE-2025-15373EyouCMS function.php saveRemote server-side request forgery6.3
- CVE-2025-15143EyouCMS Backend Template Management FilemanagerLogic.php sql injection4.7
- CVE-2025-65868XML external entity (XXE) injection in eyoucms v1.7.1 allows remote attackers to cause a denial of service via crafted body of a POST request.7.5
- CVE-2025-52335EyouCMS 1.7.3 is vulnerale to Cross Site Scripting (XSS) in index.php, which can be exploited to obtain sensitive information.6.1
- CVE-2024-52680EyouCMS 1.6.7 is vulnerable to Cross Site Scripting (XSS) in /login.php?m=admin&c=System&a=web&lang=cn.6.1
- CVE-2024-11211EyouCMS Website Logo unrestricted upload4.7
- CVE-2024-11210EyouCMS FilemanagerLogic.php editFile path traversal5.4
- CVE-2024-48195Cross Site Scripting vulnerability in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to the post parameter.6.1
- CVE-2024-48196An issue in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to the post parameter.7.5
- CVE-2024-3431EyouCMS Backend deserialization4.7
- CVE-2023-42286There is a PHP file inclusion vulnerability in the template configuration of eyoucms v1.6.4, allowing attackers to execute code or system commands through a carefully crafted malicious payload.9.8
- CVE-2024-23033Cross Site Scripting vulnerability in the path parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL.6.1
The record
- Peak rank
- #87 in Jan 2023
- Busiest month shown
- Aug 2021, 6 CVEs
- Months with a KEV entry
- 0 since Aug 2021
- Monthly snapshots
- 10 since 2021