Lucene search
K

108 matches found

NVD
NVD
added 2026/02/23 3:15 a.m.10 views

CVE-2026-2965

A security flaw has been discovered in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.9. The affected element is an unknown function of the file /admin/SysModule/edit.html of the component System Extension Module. Performing a manipulation of the argument Title results in cross site scripting. The...

4.8CVSS0.00202EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/02/23 1:32 a.m.6 views

CVE-2026-2965

A security flaw has been discovered in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.9. The affected element is an unknown function of the file /admin/SysModule/edit.html of the component System Extension Module. Performing a manipulation of the argument Title results in cross site scripting. The...

4.8CVSS3.4AI score0.00202EPSS
Exploits0References4
CVE
CVE
added 2026/02/23 1:32 a.m.9 views

CVE-2026-2965

Summary: CVE-2026-2965 affects 07FLYCMS, 07FLY-CMS and 07FlyCRM up to version 1.2.9. The vulnerability exists in the System Extension Module, specifically the /admin/SysModule/edit.html file, where manipulating the Title argument causes cross-site scripting (XSS). The issue can be triggered remot...

4.8CVSS3.5AI score0.00202EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/02/23 1:32 a.m.27 views

CVE-2026-2965 07FLYCMS/07FLY-CMS/07FlyCRM System Extension edit.html cross site scripting

A security flaw has been discovered in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.9. The affected element is an unknown function of the file /admin/SysModule/edit.html of the component System Extension Module. Performing a manipulation of the argument Title results in cross site scripting. The...

4.8CVSS0.00202EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/02/23 12:0 a.m.6 views

PT-2026-21489

A security flaw has been discovered in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.9. The affected element is an unknown function of the file /admin/SysModule/edit.html of the component System Extension Module. Performing a manipulation of the argument Title results in cross site scripting. The...

4.8CVSS3.3AI score0.00202EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-53534

Malicious code in bioql PyPI...

4.3CVSS6.6AI score0.00164EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-50195

Malicious code in bioql PyPI...

7.2CVSS5AI score0.00597EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-5918

Malicious code in bioql PyPI...

9.6CVSS6.6AI score0.00273EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-50162

Malicious code in bioql PyPI...

7.2CVSS5AI score0.00597EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-53535

Malicious code in bioql PyPI...

4.3CVSS6.6AI score0.00164EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-53533

Malicious code in bioql PyPI...

3.5CVSS6.6AI score0.00149EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-20135

Malicious code in bioql PyPI...

5.3CVSS4.9AI score0.00249EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-53646

Malicious code in bioql PyPI...

3.5CVSS6.6AI score0.00149EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2024-50196

Malicious code in bioql PyPI...

7.2CVSS5AI score0.00597EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-50163

Malicious code in bioql PyPI...

5.1CVSS4AI score0.00383EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/09/21 2:10 p.m.7 views

CVE-2025-10712

A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831. This issue affects some unknown processing of the file /index.php/Login/login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit has...

7.5CVSS6.9AI score0.00302EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/09/21 1:25 p.m.6 views

CVE-2025-10710

A flaw has been found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831. This affects an unknown part of the file /index.php. This manipulation of the argument Name causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been published and may be used. Thi...

5.3CVSS5.3AI score0.00339EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/09/21 1:25 p.m.10 views

CVE-2025-10711

A vulnerability has been found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831. This vulnerability affects unknown code of the file /index.php/sysmanage/Login. Such manipulation of the argument Name leads to cross site scripting. The attack may be performed from remote. The exploit has been...

5.3CVSS5.2AI score0.00339EPSS
Exploits0References1
NVD
NVD
added 2025/09/19 2:15 p.m.6 views

CVE-2025-10712

A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831. This issue affects some unknown processing of the file /index.php/Login/login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit has...

7.5CVSS0.00302EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/09/19 1:32 p.m.3 views

CVE-2025-10712 07FLYCMS/07FLY-CMS/07FlyCRM login sql injection

A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831. This issue affects some unknown processing of the file /index.php/Login/login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit has...

7.5CVSS7.2AI score0.00302EPSS
Exploits0References4
Rows per page
Query Builder