PT-2025-3920 · Fanli2012 · Native-Php-Cms

Name of the Vulnerable Software and Affected Versions: Fanli2012 native-php-cms version 1.0 Description: A critical issue has been found in the processing of the file /fladmin/article dodel.php. The manipulation of the id argument leads to SQL injection. The attack may be initiated remotely. The...

CVE-2025-0491: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in Fanli2012 native-php-cms 1.0. Affected is an unknown function of the file /fladmin/catdodel.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

CVE-2025-0484: Improper Authorization

A vulnerability was found in Fanli2012 native-php-cms 1.0 and classified as critical. This issue affects some unknown processing of the file /fladmin/sysconfigdoedit.php of the component Backend. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit h...

native-php-cms 安全漏洞

native-php-cms is a website builder system for FLi individual developers. A security vulnerability exists in version 1.0 of native-php-cms, which stems from a parameter id in the file /fladmin/articledodel.php that can lead to SQL injection...

native-php-cms 安全漏洞

native-php-cms is a website builder system for FLi individual developers. A security vulnerability exists in version 1.0 of native-php-cms, which stems from improper handling in the file /fladmin/userrecoverpwd.php, which could lead to the use of default credentials...

CVE-2025-0485: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Fanli2012 native-php-cms 1.0. It has been classified as problematic. Affected is an unknown function of the file /fladmin/sysconfigdoedit.php. The manipulation of the argument info leads to cross site scripting. It is possible to launch the attack remotely. The exploi...

PT-2025-3914 · Fanli2012 · Native-Php-Cms

Name of the Vulnerable Software and Affected Versions: Fanli2012 native-php-cms version 1.0 Description: A critical issue affects the processing of the file /fladmin/sysconfig doedit.php in the Backend component, leading to improper authorization. The attack can be initiated remotely...

native-php-cms 安全漏洞

native-php-cms is a website builder system for FLi individual developers. A security vulnerability exists in native-php-cms version 1.0, which originates from the parameter username in the file /fladmin/login.php that can cause SQL injection...

native-php-cms 安全漏洞

native-php-cms is a website builder system for FLi individual developers. A security vulnerability exists in native-php-cms version 1.0, which originates from improper authorization in the file /fladmin/sysconfigdoedit.php in the Backend component...

PT-2025-3921 · Fanli2012 · Native-Php-Cms

Name of the Vulnerable Software and Affected Versions: Fanli2012 native-php-cms version 1.0 Description: A critical issue has been found in the software, affecting an unknown function of the file /fladmin/cat dodel.php. The manipulation of the id argument leads to SQL injection. It is possible to...

CVE-2025-0488: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Fanli2012 native-php-cms 1.0. This affects an unknown part of the file productlist.php. The manipulation of the argument cat leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

native-php-cms 安全漏洞

native-php-cms is a website builder system for FLi individual developers. A security vulnerability exists in version 1.0 of native-php-cms, which stems from improper manipulation of the message/error parameter in the file /fladmin/jump.php, and is susceptible to cross-site scripting attacks...

CVE-2025-0486: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Fanli2012 native-php-cms 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /fladmin/login.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploi...

PT-2025-3915

Name of the Vulnerable Software and Affected Versions Fanli2012 native-php-cms version 1.0 Description A problem has been found in the software. It affects an unknown function of the file /fladmin/sysconfig doedit.php. The issue arises from the manipulation of the info argument, leading to...

PT-2025-3918 · Unknown · Fanli2012 Native-Php-Cms

Name of the Vulnerable Software and Affected Versions: Fanli2012 native-php-cms version 1.0 Description: A critical vulnerability has been found in the product list.php file of Fanli2012 native-php-cms. The issue is related to the manipulation of the cat argument, which leads to SQL injection. Th...

PT-2025-3913 · Fanli2012 · Native-Php-Cms

Name of the Vulnerable Software and Affected Versions: Fanli2012 native-php-cms version 1.0 Description: A vulnerability has been found in the file /fladmin/jump.php, affecting unknown code. The manipulation of the message/error argument leads to cross-site scripting. The attack can be initiated...

PT-2025-3919 · Fanli2012 · Native-Php-Cms

Name of the Vulnerable Software and Affected Versions: Fanli2012 native-php-cms version 1.0 Description: A critical vulnerability was found in the file /fladmin/friendlink dodel.php, where the manipulation of the id argument leads to SQL injection. The attack can be initiated remotely. The exploi...

PT-2025-3912 · Fanli2012 · Native-Php-Cms

Name of the Vulnerable Software and Affected Versions: Fanli2012 native-php-cms version 1.0 Description: A critical vulnerability was found in the software, affecting an unknown part of the file /fladmin/user recoverpwd.php. The manipulation leads to the use of default credentials. It is possible...

CVE-2025-0487: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Fanli2012 native-php-cms 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /fladmin/catedit.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-0483: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in Fanli2012 native-php-cms 1.0 and classified as problematic. This vulnerability affects unknown code of the file /fladmin/jump.php. The manipulation of the argument message/error leads to cross site scripting. The attack can be initiated remotely. The exploit has...