EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Basic Information component under the Edit Member module.
cpe:2.3:a:eyoucms:eyoucms:1.5.9:*:*:*:*:*:*:*
42A15197-E862-429C-8ECB-79D0B850C9C5
OR
EyouCMS v1.5.9 has a vulnerability, Cross-site request forgery(CSRF).Located in the backend, member center, edit member profile. To exploit this vulnerability, a constructed HTML file needs to be opened
1. Enter the background - > member center - > edit members - > basic information
![图片1](https://user-images.githubusercontent.com/83074322/198295189-ca99d972-ec7a-41b4-9d44-a4dd7cdf90c4.png)
![图片2](https://user-images.githubusercontent.com/83074322/198295206-53e31cf4-9264-4cb2-97e1-5177a2175943.png)
2. Construct a request package to modify the membership level and login password, among other basic information
![图片3](https://user-images.githubusercontent.com/83074322/198295336-7ecadacc-362a-476e-bd5e-f1774cdc6e51.png)
The figure above shows the constructed web code, and the password is changed to "csrftest" through CSRF, and the membership level is changed to premium membership (100 days).
3. View profile
![图片4](https://user-images.githubusercontent.com/83074322/198297034-f94fad22-544d-435c-aee5-b715ffa6fded.png)
In this case, the password is "test01" and the membership level is registered member
4. Click on the constructed web page
![图片5](https://user-images.githubusercontent.com/83074322/198297173-8e5bf36c-ec16-4e95-b4c7-b5bb315815cc.png)
Return to the client refresh page to log in to test01 again, the password has been changed to "csrftest", and the membership level has been changed to premium membership
![图片6](https://user-images.githubusercontent.com/83074322/198298326-dfca60e7-1dbe-4214-b8b9-e4d9c52357ee.png)
![图片7](https://user-images.githubusercontent.com/83074322/198298307-3d6bcbf0-eb07-4633-9240-422b1ebd6266.png)
![图片8](https://user-images.githubusercontent.com/83074322/198298358-566880f4-3a34-4d65-8dda-7f16b7b1ae16.png)
At this point the password has been changed to "csrftest"
The client views personal information:
![图片9](https://user-images.githubusercontent.com/83074322/198298506-ea979571-c58a-4b5a-a3e4-a6e66e4da424.png)
View the test01 user's profile in the background:
![图片10](https://user-images.githubusercontent.com/83074322/198299317-e0faa41d-799f-4255-858a-c00b7aae89c6.png)


EyouCMS v1.5.9 has a vulnerability, Cross-site request forgery(CSRF)
This is a GitHub Issue
repo:eyoucms
owner:weng-xianhu
Title : EyouCMS v1.5.9 has a vulnerability, Cross-site request forgery(CSRF)
Issue date:

--- start body ---
EyouCMS v1.5.9 has a vulnerability, Cross-site request forgery(CSRF).Located in the backend, member center, edit member profile. To exploit this vulnerability, a constructed HTML file needs to be opened
1. Enter the background - > member center - > edit members - > basic information
![图片1](https://user-images.githubusercontent.com/83074322/198295189-ca99d972-ec7a-41b4-9d44-a4dd7cdf90c4.png)
![图片2](https://user-images.githubusercontent.com/83074322/198295206-53e31cf4-9264-4cb2-97e1-5177a2175943.png)
2. Construct a request package to modify the membership level and login password, among other basic information
![图片3](https://user-images.githubusercontent.com/83074322/198295336-7ecadacc-362a-476e-bd5e-f1774cdc6e51.png)
The figure above shows the constructed web code, and the password is changed to "csrftest" through CSRF, and the membership level is changed to premium membership (100 days).
3. View profile
![图片4](https://user-images.githubusercontent.com/83074322/198297034-f94fad22-544d-435c-aee5-b715ffa6fded.png)
In this case, the password is "test01" and the membership level is registered member
4. Click on the constructed web page
![图片5](https://user-images.githubusercontent.com/83074322/198297173-8e5bf36c-ec16-4e95-b4c7-b5bb315815cc.png)
Return to the client refresh page to log in to test01 again, the password has been changed to "csrftest", and the membership level has been changed to premium membership
![图片6](https://user-images.githubusercontent.com/83074322/198298326-dfca60e7-1dbe-4214-b8b9-e4d9c52357ee.png)
![图片7](https://user-images.githubusercontent.com/83074322/198298307-3d6bcbf0-eb07-4633-9240-422b1ebd6266.png)
![图片8](https://user-images.githubusercontent.com/83074322/198298358-566880f4-3a34-4d65-8dda-7f16b7b1ae16.png)
At this point the password has been changed to "csrftest"
The client views personal information:
![图片9](https://user-images.githubusercontent.com/83074322/198298506-ea979571-c58a-4b5a-a3e4-a6e66e4da424.png)
View the test01 user's profile in the background:
![图片10](https://user-images.githubusercontent.com/83074322/198299317-e0faa41d-799f-4255-858a-c00b7aae89c6.png)


--- end body ---

comments :
--- start comments ---

--- end comments ---