Lucene search
+L

258 matches found

OSV
OSV
•added 2021/09/20 8:45 p.m.•37 views

GHSA-RF3W-29H3-R636 Arbitrary Code Execution in feehi/cms

An arbitrary file upload vulnerability in Feehi CMS v2.0.8 and below allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS9.6AI score0.01781EPSS
SaveExploits1References4
NVD
NVD
•added 2021/09/15 10:15 p.m.•39 views

CVE-2020-21322

An arbitrary file upload vulnerability in Feehi CMS v2.0.8 and below allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS0.01781EPSS
SaveExploits1References1
OSV
OSV
•added 2021/09/15 10:15 p.m.•25 views

CVE-2020-21322

An arbitrary file upload vulnerability in Feehi CMS v2.0.8 and below allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS7.7AI score
SaveExploits0References1
Prion
Prion
•added 2021/09/15 10:15 p.m.•27 views

Design/Logic Flaw

An arbitrary file upload vulnerability in Feehi CMS v2.0.8 and below allows attackers to execute arbitrary code via a crafted PHP file...

7.5CVSS9.6AI score0.01781EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2021/09/15 9:17 p.m.•2 views

CVE-2020-21322

An arbitrary file upload vulnerability in Feehi CMS v2.0.8 and below allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS0.01781EPSS
SaveExploits1References4
CVE
CVE
•added 2021/09/15 9:17 p.m.•85 views

CVE-2020-21322

CVE-2020-21322 is an arbitrary file upload vulnerability in Feehi CMS v2.0.8 and earlier that allows an attacker to execute arbitrary PHP code via a crafted file. Affected: Feehi CMS (PHP-based). Root cause: improper handling of uploaded files enabling code execution. Impact: remote code executio...

9.8CVSS9.6AI score0.01781EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/09/15 9:17 p.m.•47 views

CVE-2020-21322

An arbitrary file upload vulnerability in Feehi CMS v2.0.8 and below allows attackers to execute arbitrary code via a crafted PHP file...

9.7AI score0.01781EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/09/15 12:00 a.m.•2 views

PT-2021-10610

Name of the Vulnerable Software and Affected Versions: Feehi CMS versions 2.0.8 and below Description: An arbitrary file upload issue allows attackers to execute arbitrary code via a crafted PHP file. Recommendations: For Feehi CMS versions 2.0.8 and below, at the moment, there is no information...

9.8CVSS0.01781EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/15 12:00 a.m.•6 views

CVE-2020-21322: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in Feehi CMS v2.0.8 and below allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS6.5AI score0.01781EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2021/06/08 8:12 p.m.•68 views

Server-Side Request Forgery in Feehi CMS

Feehi CMS 2.1.1 is affected by a Server-side request forgery SSRF vulnerability. When the user modifies the HTTP Referer header to any url, the server can make a request to it...

9.1CVSS1.3AI score0.01109EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2021/06/08 8:12 p.m.•49 views

GHSA-GC45-J3M5-8QFQ Server-Side Request Forgery in Feehi CMS

Feehi CMS 2.1.1 is affected by a Server-side request forgery SSRF vulnerability. When the user modifies the HTTP Referer header to any url, the server can make a request to it...

9.1CVSS9.2AI score0.01109EPSS
SaveExploits1References4
Veracode
Veracode
•added 2021/05/25 4:46 a.m.•28 views

Server-Side Request Forgery (SSRF)

feehi/cms is vulnerable to server-side request forgery. An attacker is able to modifies the HTTP Referer header and cause the server to make a request to the URL...

9.1CVSS1AI score0.01109EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2021/05/24 8:15 p.m.•24 views

CVE-2021-30108

Feehi CMS 2.1.1 is affected by a Server-side request forgery SSRF vulnerability. When the user modifies the HTTP Referer header to any url, the server can make a request to it...

9.1CVSS6.8AI score
SaveExploits0References1
NVD
NVD
•added 2021/05/24 8:15 p.m.•31 views

CVE-2021-30108

Feehi CMS 2.1.1 is affected by a Server-side request forgery SSRF vulnerability. When the user modifies the HTTP Referer header to any url, the server can make a request to it...

9.1CVSS0.01109EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/05/24 8:15 p.m.•12 views

CVE-2021-30108

Feehi CMS 2.1.1 is affected by a Server-side request forgery SSRF vulnerability. When the user modifies the HTTP Referer header to any url, the server can make a request to it...

9.1CVSS7AI score0.01109EPSS
SaveExploits1References2
Prion
Prion
•added 2021/05/24 8:15 p.m.•48 views

Server side request forgery (ssrf)

Feehi CMS 2.1.1 is affected by a Server-side request forgery SSRF vulnerability. When the user modifies the HTTP Referer header to any url, the server can make a request to it...

6.4CVSS9.1AI score0.01109EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/05/24 7:27 p.m.•30 views

CVE-2021-30108

Feehi CMS 2.1.1 is affected by a Server-side request forgery SSRF vulnerability. When the user modifies the HTTP Referer header to any url, the server can make a request to it...

9.5AI score0.01109EPSS
SaveExploits1References1
CVE
CVE
•added 2021/05/24 7:27 p.m.•107 views

CVE-2021-30108

Feehi CMS 2.1.1 is affected by a Server-Side Request Forgery (SSRF). The vulnerability arises when an attacker modifies the HTTP Referer header to any URL, causing the Feehi CMS server to issue a request to that URL. This is described across multiple sources in the provided set (CVE-2021-30108 an...

9.1CVSS9.2AI score0.01109EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2021/05/24 7:27 p.m.•3 views

CVE-2021-30108

Feehi CMS 2.1.1 is affected by a Server-side request forgery SSRF vulnerability. When the user modifies the HTTP Referer header to any url, the server can make a request to it...

9.3CVSS0.01109EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2021/05/24 12:00 a.m.•4 views

PT-2021-18601

Name of the Vulnerable Software and Affected Versions Feehi CMS version 2.1.1 Description The issue is related to a Server-side request forgery SSRF vulnerability. This occurs when the user modifies the HTTP Referer header to any URL, allowing the server to make a request to it. Recommendations F...

9.1CVSS0.01109EPSS
SaveExploits1References8
Rows per page
Query Builder