Feehi CMS 代码问题漏洞

FeehiCMS is a Php-based CMS website builder by Liufee Personal Developer. Feehi CMS 2.1.1 suffers from a code issue vulnerability that stems from the server being able to send requests to any url when the user modifies the HTTP Referer header to it...

CVE-2021-30108: Server-Side Request Forgery (SSRF)

Feehi CMS 2.1.1 is affected by a Server-side request forgery SSRF vulnerability. When the user modifies the HTTP Referer header to any url, the server can make a request to it...

CVE-2020-21146

Feehi CMS 2.0.8 is affected by a cross-site scripting XSS vulnerability. When the user name is inserted as JavaScript code, browsing the post will trigger the XSS...

CVE-2020-22643

Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. After an administrator logs in, open the administrator image upload page to potentially upload malicious files...

CVE-2020-22643

Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. After an administrator logs in, open the administrator image upload page to potentially upload malicious files...

CVE-2020-21146

Feehi CMS 2.0.8 is affected by a cross-site scripting XSS vulnerability. When the user name is inserted as JavaScript code, browsing the post will trigger the XSS...

Cross site scripting

Feehi CMS 2.0.8 is affected by a cross-site scripting XSS vulnerability. When the user name is inserted as JavaScript code, browsing the post will trigger the XSS...

Privilege escalation

Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. After an administrator logs in, open the administrator image upload page to potentially upload malicious files...

CVE-2020-21146

Feehi CMS 2.0.8 is affected by a cross-site scripting XSS vulnerability. When the user name is inserted as JavaScript code, browsing the post will trigger the XSS...

CVE-2020-21146

CVE-2020-21146 affects Feehi CMS 2.0.8 with a cross-site scripting (XSS) vulnerability. The issue is triggered when a user name is inserted as JavaScript code and, upon browsing a post, the XSS can be executed. The provided connected documents confirm the vulnerability and its description across ...

CVE-2020-21146

Feehi CMS 2.0.8 is affected by a cross-site scripting XSS vulnerability. When the user name is inserted as JavaScript code, browsing the post will trigger the XSS...

CVE-2020-22643

Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability that can lead to remote code execution. The issue arises after an administrator logs in and uses the administrator image upload page to upload files, indicating post-auth file upload handling without sufficient validation. The ...

CVE-2020-22643

Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. After an administrator logs in, open the administrator image upload page to potentially upload malicious files...

CVE-2020-22643

Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. After an administrator logs in, open the administrator image upload page to potentially upload malicious files...

CVE-2020-21146: Improper Neutralization of Input During Web Page Generation

Feehi CMS 2.0.8 is affected by a cross-site scripting XSS vulnerability. When the user name is inserted as JavaScript code, browsing the post will trigger the XSS...

CVE-2020-22643: Unrestricted Upload of File with Dangerous Type

Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. After an administrator logs in, open the administrator image upload page to potentially upload malicious files...

PT-2021-10598

Name of the Vulnerable Software and Affected Versions: Feehi CMS version 2.0.8 Description: The issue is related to a cross-site scripting XSS vulnerability. When the user name is inserted as JavaScript code, browsing the post will trigger the XSS. Recommendations: For Feehi CMS version 2.0.8, as...

PT-2021-10774

Name of the Vulnerable Software and Affected Versions Feehi CMS versions 2.1.0 through 2.1.0 Description The issue allows for an arbitrary file upload, potentially resulting in remote code execution. This can be achieved by accessing the administrator image upload page after an administrator has...