CVE-2023-2057

A vulnerability was found in EyouCms 1.5.4. It has been classified as problematic. Affected is an unknown function of the file login.php?m=admin&c=Arctype&a=edit of the component New Picture Handler. The manipulation of the argument litpic_loca leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-225942 is the identifier assigned to this vulnerability.

• CWE-79

• https://github.com/sleepyvv/vul_report/blob/main/EYOUCMS/XSS1.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.225942Permissions Required, Third Party Advisory
• https://vuldb.com/?id.225942Permissions Required, Third Party Advisory
• https://github.com/sleepyvv/vul_report/blob/main/EYOUCMS/XSS1.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.225942Permissions Required, Third Party Advisory
• https://vuldb.com/?id.225942Permissions Required, Third Party Advisory

Published

Apr 14, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20564 Insufficient validation in the IOCTL (Input Output Co…6.7
• CVE-2023-20565Insufficient protections in System Management Mode (SMM) cod…7.8
• CVE-2023-20566Improper address validation in ASP with SNP enabled may pote…7.5
• CVE-2023-20567Improper signature verification of RadeonTM RX Vega M Graphi…6.7
• CVE-2023-20568Improper signature verification of RadeonTM RX Vega M Graphi…6.7
• CVE-2023-20569 A side channel vulnerability on some of the AMD CPUs may …4.7
• CVE-2023-20570Insufficient verification of data authenticity in the config…3.3
• CVE-2023-20571A race condition in System Management Mode (SMM) code may al…8.1
• CVE-2023-20572An observable timing discrepancy in the ASP could allow a pr…5.6
• CVE-2023-20573A privileged attacker can prevent delivery of debug exceptio…3.2
• CVE-2023-20575 A potential power side-channel vulnerability in some AMD pr…6.5
• CVE-2023-20578A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an att…6.4