CVE-2024-48196

HIGH
Published Oct 28, 2024 Modified Apr 18, 2025

Description

An issue in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to the post parameter.

Is your site exposed to CVE-2024-48196?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products

Vendor Product
eyoucms eyoucms

References

Frequently Asked Questions

What is CVE-2024-48196? +
An issue in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to the post parameter. It has a CVSS v3.1 base score of 7.5 (HIGH).
How severe is CVE-2024-48196? +
CVE-2024-48196 has a CVSS v3.1 score of 7.5 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
What products are affected by CVE-2024-48196? +
CVE-2024-48196 affects products from eyoucms, specifically: eyoucms. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-48196? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2023-42286 9.8

There is a PHP file inclusion vulnerability in the template configuration of eyoucms v1.6.4, allowing attackers to execute code or …
CVE-2025-65868 7.5

XML external entity (XXE) injection in eyoucms v1.7.1 allows remote attackers to cause a denial of service via crafted body …
CVE-2025-15373 6.3

A security vulnerability has been detected in EyouCMS up to 1.7.7. Impacted is the function saveRemote of the file application/function.php. …
CVE-2025-15375 6.3

A flaw has been found in EyouCMS up to 1.7.7. The impacted element is the function unserialize of the file …
CVE-2024-23034 6.1

Cross Site Scripting vulnerability in the input parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via …
CVE-2024-48195 6.1

Cross Site Scripting vulnerability in eyouCMS v.1.6.7 allows a remote attacker to obtain sensitive information via a crafted script to …

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-48196 — free, no signup required.