Lucene search
+L

293 matches found

Prion
Prion
•added 2022/09/29 2:15 p.m.•26 views

Cross site scripting

FeehiCMS v2.1.1 was discovered to contain a cross-site scripting XSS vulnerability via a crafted payload injected into the Comment box under the Single Page module...

4.9CVSS5.2AI score0.00494EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2022/09/29 1:33 p.m.•2 views

CVE-2022-40408

FeehiCMS v2.1.1 was discovered to contain a cross-site scripting XSS vulnerability via a crafted payload injected into the Comment box under the Single Page module...

5.4CVSS0.00494EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2022/09/29 1:33 p.m.•8 views

CVE-2022-40408

FeehiCMS v2.1.1 was discovered to contain a cross-site scripting XSS vulnerability via a crafted payload injected into the Comment box under the Single Page module...

5.3AI score0.00494EPSS
SaveExploits1References1
OSV
OSV
•added 2022/09/29 1:33 p.m.•28 views

CVE-2022-40408

FeehiCMS v2.1.1 was discovered to contain a cross-site scripting XSS vulnerability via a crafted payload injected into the Comment box under the Single Page module...

5.4CVSS5.3AI score
SaveExploits0References3
CVE
CVE
•added 2022/09/29 1:33 p.m.•94 views

CVE-2022-40408

FeehiCMS v2.1.1 is affected by CVE-2022-40408, a cross-site scripting (XSS) vulnerability that can be triggered by a crafted payload entered into the Comment box of the Single Page module. The issue is explicitly described across multiple sources as an XSS in this area; CVSS base score is 5.4 (Me...

5.4CVSS5.2AI score0.00494EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/09/29 1:33 p.m.•42 views

CVE-2022-40408

FeehiCMS v2.1.1 was discovered to contain a cross-site scripting XSS vulnerability via a crafted payload injected into the Comment box under the Single Page module...

5.5AI score0.00494EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/29 12:00 a.m.•5 views

CVE-2022-40408: Improper Neutralization of Input During Web Page Generation

FeehiCMS v2.1.1 was discovered to contain a cross-site scripting XSS vulnerability via a crafted payload injected into the Comment box under the Single Page module...

5.4CVSS5.8AI score0.00494EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/09/29 12:00 a.m.•16 views

PT-2022-25371 · Feehicms · Feehicms

Name of the Vulnerable Software and Affected Versions: FeehiCMS versions 2.0.1.1 and prior Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited via a crafted payload injected into the Comment box under the Single Page module...

5.4CVSS5AI score0.00494EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2022/09/14 12:00 a.m.•20 views

FeehiCMS 注入漏洞

FeehiCMS is a Php-based CMS website builder by Liufee Personal Developer. A security vulnerability exists in FeehiCMS version 2.1.1, which stems from the fact that it may allow an attacker to implement spoofing of specific headers via host header injection. This can be abused for password reset...

6.1CVSS6.3AI score0.00601EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2022/09/07 12:01 a.m.•29 views

FeehiCMS has an arbitrary file upload vulnerability

There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8.1 at the head image upload, that allows attackers to execute relevant PHP code...

9.8CVSS9.4AI score0.01246EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2022/09/07 12:01 a.m.•79 views

GHSA-JJ62-MC3M-J769 FeehiCMS has an arbitrary file upload vulnerability

There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8.1 at the head image upload, that allows attackers to execute relevant PHP code...

9.8CVSS9.7AI score0.01246EPSS
SaveExploits1References5
OSV
OSV
•added 2022/09/06 7:15 p.m.•27 views

CVE-2020-21516

There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8 at the head image upload, that allows attackers to execute relevant PHP code...

9.8CVSS9.7AI score
SaveExploits0References1
NVD
NVD
•added 2022/09/06 7:15 p.m.•39 views

CVE-2020-21516

There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8 at the head image upload, that allows attackers to execute relevant PHP code...

9.8CVSS0.01246EPSS
SaveExploits1References1
Prion
Prion
•added 2022/09/06 7:15 p.m.•29 views

Design/Logic Flaw

There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8 at the head image upload, that allows attackers to execute relevant PHP code...

7.5CVSS9.6AI score0.01246EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2022/09/06 6:08 p.m.•5 views

CVE-2020-21516

There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8 at the head image upload, that allows attackers to execute relevant PHP code...

9.8CVSS0.01246EPSS
SaveExploits1References5
CVE
CVE
•added 2022/09/06 6:08 p.m.•87 views

CVE-2020-21516

FeehiCMS 2.0.8 contains an arbitrary file upload vulnerability in the head image/avatar upload pathway, enabling attackers to execute PHP code on the server. The issue is documented across multiple sources (including Red Hat, Veracode, GHSA, OSV, and NVD) with CVSS v3.1 base score 9.8 (CRITICAL, ...

9.8CVSS9.6AI score0.01246EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/09/06 6:08 p.m.•52 views

CVE-2020-21516

There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8 at the head image upload, that allows attackers to execute relevant PHP code...

9.7AI score0.01246EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/09/06 12:00 a.m.•15 views

FeehiCMS 代码问题漏洞

FeehiCMS is a Php-based CMS builder by Liufee Personal Developer. A security vulnerability exists in FeehiCMS version 2.0.8, which originates from an arbitrary file upload vulnerability during avatar upload. An attacker can exploit this vulnerability to execute related PHP code...

9.8CVSS8.6AI score0.01246EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/09/06 12:00 a.m.•15 views

PT-2022-8641 · Feehicms · Feehicms

Name of the Vulnerable Software and Affected Versions: FeehiCMS versions 2.0.8 through 2.0.8.1 Description: The issue is related to an arbitrary file upload vulnerability at the head image upload, allowing attackers to execute relevant PHP code. Recommendations: For FeehiCMS version 2.0.8, update...

9.8CVSS9.5AI score0.01246EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/06 12:00 a.m.•10 views

CVE-2020-21516: Unrestricted Upload of File with Dangerous Type

There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8 at the head image upload, that allows attackers to execute relevant PHP code...

9.8CVSS8.5AI score0.01246EPSS
SaveExploits1References2
Rows per page
Query Builder