Critical · 9.8 CVE-2023-42286 EUVD-2023-46740GHSA-95wf-ppr8-fpf4

There is a PHP file inclusion vulnerability in the template configuration of eyoucms v1.6.4, allowing attackers to execute code or system c…

Published Mar 14, 2024 · Updated Mar 13, 2025 · Assigned by mitre

Description

There is a PHP file inclusion vulnerability in the template configuration of eyoucms v1.6.4, allowing attackers to execute code or system commands through a carefully crafted malicious payload.

References

https://github.com/Nacl122/CVEReport/blob/main/CVE-2023-42286/CVE-2023-42286.md