漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
EyouCMS arcpagelist Ajax.php unserialize deserialization
Vulnerability Description
A flaw has been found in EyouCMS up to 1.7.7. The impacted element is the function unserialize of the file application/api/controller/Ajax.php of the component arcpagelist Handler. Executing a manipulation of the argument attstr can lead to deserialization. The attack can be launched remotely. The exploit has been published and may be used. The vendor is "[a]cknowledging the existence of the vulnerability, we have completed the fix and will release a new version, v1.7.8".
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
可信数据的反序列化
Vulnerability Title
EyouCMS 代码问题漏洞
Vulnerability Description
EyouCMS是中国易优（Eyou）公司的一套基于ThinkPHP的开源内容管理系统（CMS）。 EyouCMS 1.7.7及之前版本存在代码问题漏洞，该漏洞源于对文件application/api/controller/Ajax.php中参数attstr的错误操作，可能导致反序列化攻击。
CVSS Information
N/A
Vulnerability Type
N/A