Yu22X

A security flaw exists in EyouCMS up to version 1.7.6. The issue is related to a SQL injection within the Backend Template Management component, specifically in the file /application/admin/logic/FilemanagerLogic.php. Manipulation of the `content` argument in an unknown function within this file can lead to SQL injection. The attack can be launched remotely, and an exploit has been publicly released. The vendor was contacted regarding this disclosure but did not respond.

A flaw exists in dayrui XunRuiCMS that allows for cross site scripting. The issue is located in the JSONP Callback Handler component, specifically within the `dr show error`/`dr exit msg` function of the `/dayrui/Fcms/Init.php` file. Manipulation of the `callback` argument can trigger the flaw. The exploit is publicly available. The vendor was contacted but did not respond.

A flaw exists in CmsEasy that allows for code injection. The issue is located in the `savetemp action` function within the `/lib/admin/template admin.php` library of the Backend Template Management Page component. Manipulation of the `content/tempdata` argument can trigger the flaw, potentially allowing for remote code execution. The exploit for this issue has been published.

A flaw exists in DedeCMS that allows for SQL injection. The issue is due to the manipulation of the `orderby` argument in the /freelist main.php file. This can be exploited remotely. The exploit is publicly available.

A flaw exists in SeaCMS that allows for SQL injection. The issue is located in an unknown function within the `js/player/dmplayer/dmku/class/mysqli.class.php` file. Manipulation of the `page/limit` argument can lead to exploitation. The attack can be carried out remotely, and the exploit is publicly available.

A SQL injection issue exists in SeaCMS. The issue is located in the `admin video.php` file, specifically through manipulation of the `e id` argument within an unknown function. This allows for remote exploitation. The exploit has been publicly released.