eyoucms v1.6.3 was discovered to contain an information disclosure vulnerability via the component /custom_model_path/recruit.filelist.txt.
cpe:2.3:a:eyoucms:eyoucms:1.6.3:*:*:*:*:*:*:*
0DDC6EF0-7D79-4155-B984-0BA7756C05EC
OR
eyoucms 1.6.3 has an information leakage vulnerability

A bug was found. There is information leakage.
Tests are executed only in the test environment. No illegal operation

Software Link :https://github.com/weng-xianhu/eyoucms
Website : http://www.eyoucms.com/


Access the file recruit.filelist.txt to obtain the site path information.
The vulnerability path exists：/eyoucms/data/model/custom_model_path/recruit.filelist.txt.
![image](https://github.com/weng-xianhu/eyoucms/assets/138174431/05837919-e9eb-40e3-a0ad-5a346362c1ab)

Access the leaked path information page
![image](https://github.com/weng-xianhu/eyoucms/assets/138174431/3ffb2a44-564b-4dfe-8f7f-57e8ec73a4fe)

eyoucms 1.6.3 has an information leakage vulnerability
This is a GitHub Issue
repo:eyoucms
owner:weng-xianhu
Title : eyoucms 1.6.3 has an information leakage vulnerability
Issue date:

--- start body ---
eyoucms 1.6.3 has an information leakage vulnerability

A bug was found. There is information leakage.
Tests are executed only in the test environment. No illegal operation

Software Link :https://github.com/weng-xianhu/eyoucms
Website : http://www.eyoucms.com/


Access the file recruit.filelist.txt to obtain the site path information.
The vulnerability path exists：/eyoucms/data/model/custom_model_path/recruit.filelist.txt.
![image](https://github.com/weng-xianhu/eyoucms/assets/138174431/05837919-e9eb-40e3-a0ad-5a346362c1ab)

Access the leaked path information page
![image](https://github.com/weng-xianhu/eyoucms/assets/138174431/3ffb2a44-564b-4dfe-8f7f-57e8ec73a4fe)

--- end body ---

comments :
--- start comments ---

--- end comments ---