CVE-2026-7388: EyouCMS Template File FilemanagerLogic.php editFile code injection
A weakness has been identified in EyouCMS up to 1.7.9. Impacted is the function editFile of the file application/admin/logic/FilemanagerLogic.php of the component Template File Handler. Executing a manipulation can lead to code injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7388?
CVE-2026-7388 is classified as a high severity vulnerability due to its potential to allow code injection.
How do I fix CVE-2026-7388?
To mitigate CVE-2026-7388, you should update EyouCMS to version 1.8.0 or later where the vulnerability is addressed.
What component is affected by CVE-2026-7388?
CVE-2026-7388 affects the Template File Handler component, specifically the file application/admin/logic/FilemanagerLogic.php.
What can an attacker do with CVE-2026-7388?
An attacker exploiting CVE-2026-7388 could manipulate the editFile function to execute arbitrary code.
Which versions of EyouCMS are vulnerable to CVE-2026-7388?
EyouCMS versions up to and including 1.7.9 are vulnerable to CVE-2026-7388.