3 matches found
CVE-2020-17563
Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to " /index.php?s=/admin-tpl-del&id="...
9.1CVSS7.5AI score0.02601EPSS
SaveExploits1References1
PT-2021-10106
Name of the Vulnerable Software and Affected Versions: FeiFeiCMS version 4.0 Description: The issue allows remote attackers to delete arbitrary files by sending a crafted HTTP request to the "/index.php?s=/admin-tpl-del&id=" API endpoint. The id variable is used in this process. Recommendations:...
9.1CVSS0.02601EPSS
SaveExploits1References4
CVE-2020-17563: Improper Limitation of a Pathname to a Restricted Directory
Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to " /index.php?s=/admin-tpl-del&id="...
9.1CVSS6AI score0.02601EPSS
SaveExploits1References2
20