CVE-2020-24000: Eyoucms

Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days.

SQL Injection vulnerability in eyoucms cms v1.4.7, allows attackers to execute arbitrary code and disclose sensitive information, via the tid parameter to index.php.

Affected products

• Eyoucms Eyoucms: version 1.4.7 only

Published 2021-11-03. Last modified 2026-06-17.