CVE-2023-31708 Information

Description

A Cross-Site Request Forgery (CSRF) in EyouCMS v1.6.2 allows attackers to execute arbitrary commands via a supplying a crafted HTML file to the Upload software format function.

Reference

https://github.com/weng-xianhu/eyoucms/issues/41