CVE-2023-31708

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

A Cross-Site Request Forgery (CSRF) in EyouCMS v1.6.2 allows attackers to execute arbitrary commands via a supplying a crafted HTML file to the Upload software format function.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-352

Affected software

No affected versions have been published.

Timeline

Published: May 23, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-31717.5A flaw was found in EAP-7 during deserialization of certain classes, which permits instantiation of HashMap and HashTable with no checks on CVE-2023-317109.8TP-Link Archer AX21(US)_V3_1.1.4 Build 20230219 and AX21(US)_V3.6_1.1.4 Build 20230219 are vulnerable to Buffer Overflow.CVE-2023-317149.8Chitor-CMS before v1.1.2 was discovered to contain multiple SQL injection vulnerabilities.CVE-2023-317167.5FUXA <= 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log CVE-2023-317177.5A SQL Injection attack in FUXA <= 1.1.12 allows exfiltration of confidential information from the database.CVE-2023-317187.5FUXA <= 1.1.12 is vulnerable to Local via Inclusion via /api/download.CVE-2023-317199.8FUXA <= 1.1.12 is vulnerable to SQL Injection via /api/signin.CVE-2023-31727.2Path Traversal in GitHub repository froxlor/froxlor prior to 2.0.20.CVE-2023-317227.8There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891).CVE-2023-317235.5yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expand_mmac_params at /nasm/nasm-pp.c.CVE-2023-317247.8yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function do_directive at /nasm/nasm-pp.c.CVE-2023-317255.5yasm 1.3.0.55.g101bc was discovered to contain a heap-use-after-free via the function expand_mmac_params at yasm/modules/preprocs/nasm/nasm-