This vulnerability affects the editFile function within application/admin/logic/FilemanagerLogic.php in EyouCMS versions 1.7.0 through 1.7.9. A remote attacker can exploit this flaw to inject and execute arbitrary code on the affected system. The vulnerability is classified as code injection and requires no user interaction, with low complexity and no scope change. The CVSS 4.0 base score is 5.1, indicating medium severity. No official patch or remediation has been published by the vendor as of the latest information.

Successful exploitation can lead to remote code execution on the server running EyouCMS, potentially allowing attackers to execute arbitrary commands or code. This can compromise the confidentiality, integrity, and availability of the affected system. However, the vulnerability requires high privileges to exploit (PR:H), which may limit the attack surface. The exploit is publicly available, increasing the risk of attacks.

No official fix or patch is currently available from the vendor. Users should monitor the vendor's communications for updates or patches. Until a fix is released, restricting access to the affected functionality and applying strict access controls to the administration interface may reduce exposure. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.