CVE-2022-26273: Critical severity eyoucms vulnerability
Published Mar 28, 2022
·Updated
EyouCMS v1.5.4 was discovered to lack parameter filtering in \user\controller\shop.php, leading to payment logic vulnerabilities.
Affected Software
1 affected component
Eyoucms Eyoucms=1.5.4
Event History
Mar 28, 2022
CVE Published
via MITRE·01:09 AM
Data Sourced
via MITRE·01:09 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2022-26273.
2
What is the severity level of CVE-2022-26273?
The severity level of CVE-2022-26273 is critical.
3
Which version of EyouCMS is affected by CVE-2022-26273?
EyouCMS version 1.5.4 is affected by CVE-2022-26273.
4
What is the impact of CVE-2022-26273?
CVE-2022-26273 can lead to payment logic vulnerabilities.
5
Is there a fix available for CVE-2022-26273?
No fix is currently available for CVE-2022-26273. It is recommended to keep the software up to date and apply any security patches or updates provided by the vendor when they become available.