Description
A vulnerability was found in EyouCMS 1.6.5. It has been declared as critical. This vulnerability affects unknown code of the file /login.php?m=admin&c=Field&a=channel_edit of the component Backend. The manipulation of the argument channel_id leads to deserialization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259612. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | EyouCMS | 1.6.5 | — |
References
- VDB-259612 | EyouCMS Backend deserialization vdb-entry technical-description
- VDB-259612 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #308208 | 海口快推科技有限公司 eyoucms v1.6.5 remote code execute third-party-advisory
- https://terrific-street-3d0.notion.site/EYOUCMS-v1-6-5-RCE-7fe12e91a9b249e88e6ab36446b5ba22 exploit