CVE-2026-7389: EyouCMS common.php GetSortData sql injection
A security vulnerability has been detected in EyouCMS up to 1.7.9. The affected element is the function GetSortData of the file application/common.php. The manipulation of the argument sortasc leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7389?
CVE-2026-7389 has a high severity due to its potential for remote SQL injection attacks.
How do I fix CVE-2026-7389?
To fix CVE-2026-7389, upgrade EyouCMS to version 1.8.0 or later, where the vulnerability is patched.
What versions of EyouCMS are affected by CVE-2026-7389?
EyouCMS versions up to and including 1.7.9 are affected by CVE-2026-7389.
How can CVE-2026-7389 be exploited?
CVE-2026-7389 can be exploited by manipulating the 'sort_asc' argument in the GetSortData function to execute arbitrary SQL queries.
What are the potential impacts of CVE-2026-7389?
The potential impacts of CVE-2026-7389 include unauthorized data access, data manipulation, and complete database compromise.