CVE-2023-42286 Vulnerability Details

Record summary

CVE-2023-42286 has a selected CVSS score of 9.8 (critical).

Description

There is a PHP file inclusion vulnerability in the template configuration of eyoucms v1.6.4, allowing attackers to execute code or system commands through a carefully crafted malicious payload.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone

AutomatableYes

Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 12, 2024 · Source: CVE List

Affected products and versions

Product	Source	Version range	Status
eyoucms Browse eyoucms / eyoucms Default status: unknown	CVE List	1.6.4	affected

References

github.com

https://github.com/Nacl122/CVEReport/blob/main/CVE-2023-42286/CVE-2023-42286.md

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2023-42286