Vulnerabilities > Eyoucms > Eyoucms > 1.2.7

DATE CVE VULNERABILITY TITLE RISK
2020-10-22 CVE-2020-18129 Cross-Site Request Forgery (CSRF) vulnerability in Eyoucms 1.2.7
A CSRF vulnerability in Eyoucms v1.2.7 allows an attacker to add an admin account via login.php.
network
eyoucms CWE-352
6.8
6.8
2019-10-10 CVE-2019-17430 Cross-site Scripting vulnerability in Eyoucms
EyouCms through 2019-07-11 has XSS related to the login.php web_recordnum parameter.
network
eyoucms CWE-79
4.3
4.3