CVE-2026-13569: weng-xianhu EyouCMS API index.php sql injection
A security vulnerability has been detected in weng-xianhu EyouCMS up to 1.7.1. This issue affects some unknown processing of the file /index.php of the component API. Such manipulation of the argument clicklike leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2026-13569?
CVE-2026-13569 is a vulnerability in weng-xianhu EyouCMS API that allows for SQL injection through the index.php file.
What is the severity of CVE-2026-13569?
The severity of CVE-2026-13569 is rated as medium with a score of 4.7.
How do I fix CVE-2026-13569?
To fix CVE-2026-13569, you should update your EyouCMS to the latest version that addresses this SQL injection vulnerability.
What components are affected by CVE-2026-13569?
CVE-2026-13569 affects the EyouCMS API, specifically the index.php file.
Can CVE-2026-13569 be exploited remotely?
Yes, CVE-2026-13569 can be exploited remotely, allowing an attacker to execute SQL injection attacks.