PT-2026-53265 · Weng Xianhu · Eyoucms

Dijia1234 · Published 2026-06-29 · Updated 2026-06-29 · CVE-2026-13569

Mitre

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

A security vulnerability has been detected in weng-xianhu EyouCMS up to 1.7.1. This issue affects some unknown processing of the file /index.php of the component API. Such manipulation of the argument click like leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-13569

Affected Products

Eyoucms

References · 8

• 🔥 https://github.com/weng-xianhu/eyoucms/issues/68 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-13569 · Security Note
• https://github.com/weng-xianhu/eyoucms · Note
• https://vuldb.com/cve/CVE-2026-13569 · Note
• https://vuldb.com/vuln/374577/cti · Note
• https://vuldb.com/submit/844292 · Note
• https://vuldb.com/submit/844293 · Note
• https://vuldb.com/vuln/374577 · Note