Hmx222

**Name of the Vulnerable Software and Affected Versions** EyouCMS version 1.6.2 **Description** A Cross-Site Request Forgery (CSRF) issue allows attackers to execute arbitrary commands by supplying a crafted HTML file to the Upload software format function. **Recommendations** For EyouCMS version 1.6.2, consider disabling the Upload software format function until a patch is available to prevent exploitation of the CSRF issue.