PT-2023-11502 · Feifeicms · Feifeicms

Name of the Vulnerable Software and Affected Versions: FeiFeiCMS version 4.1.190209 Description: A Cross site request forgery CSRF issue was discovered, allowing attackers to create administrator accounts via the "/index.php?s=Admin-Admin-Insert" endpoint. This enables unauthorized access to the...

FeiFeiCms 跨站请求伪造漏洞

FeiFeiCms FeiFei Movie & TV Navigation System is a PHP-based movie & TV content management system CMS. A security vulnerability exists in FeiFeiCMS v4.1.190209. An attacker can exploit this vulnerability to create an administrator account via /index.php?s=Admin-Admin-Insert...

FeiFeiCms v4.1.190209 Has Arbitrary File Deletion Vulnerability

FeiFeiCms is a PHP movie program. FeiFeiCms v4.1.190209 suffers from an arbitrary file deletion vulnerability, which stems from a failure to filter input . / filtering, an attacker can exploit this vulnerability to delete arbitrary files...

FeiFeiCms v4.1.190209 Has Arbitrary File Read Vulnerability

FeiFeiCms is a PHP movie program. FeiFeiCms v4.1.190209 suffers from an arbitrary file read vulnerability, which stems from failing to filter the input of . / filtering, an attacker can exploit this vulnerability to read arbitrary files...

CVE-2019-9825

FeiFeiCMS 4.1.190209 is affected by CVE-2019-9825. The vulnerability allows remote attackers to upload and execute arbitrary PHP code by visiting index.php?s=Admin-Index and modifying the set of allowable file extensions (e.g., adding PHP to the default image extensions). The attacker can then us...