Lucene search
+L

242 matches found

OSV
OSV
added 2024/08/29 12:31 p.m.29 views

GHSA-XXQW-83C7-R24R FeehiCMS file upload vulnerability

A vulnerability, which was classified as critical, was found in FeehiCMS up to 2.1.1. This affects the function update of the file /admin/index.php?r=friendly-link%2Fupdate. The manipulation of the argument FriendlyLinkimage leads to unrestricted upload. It is possible to initiate the attack...

6.3CVSS7.9AI score0.00756EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
added 2024/08/29 12:31 p.m.20 views

FeehiCMS file upload vulnerability

A vulnerability, which was classified as critical, was found in FeehiCMS up to 2.1.1. This affects the function update of the file /admin/index.php?r=friendly-link%2Fupdate. The manipulation of the argument FriendlyLinkimage leads to unrestricted upload. It is possible to initiate the attack...

9.8CVSS6.7AI score0.00756EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2024/08/29 12:31 p.m.24 views

GHSA-3WRG-6MG5-JG2V FeehiCMS BannerForm[img] unrestricted upload

A vulnerability has been found in FeehiCMS up to 2.1.1 and classified as critical. This vulnerability affects the function createBanner of the file /admin/index.php?r=banner%2Fbanner-create. The manipulation of the argument BannerFormimg leads to unrestricted upload. The attack can be initiated...

6.3CVSS7.8AI score0.00756EPSS
SaveExploits1References6
NVD
NVD
added 2024/08/29 12:15 p.m.34 views

CVE-2024-8295

A vulnerability has been found in FeehiCMS up to 2.1.1 and classified as critical. This vulnerability affects the function createBanner of the file /admin/index.php?r=banner%2Fbanner-create. The manipulation of the argument BannerFormimg leads to unrestricted upload. The attack can be initiated...

9.8CVSS0.00756EPSS
SaveExploits1References4
CVE
CVE
added 2024/08/29 12:00 p.m.62 views

CVE-2024-8295

FeehiCMS (

9.8CVSS7.9AI score0.00756EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2024/08/29 12:00 p.m.10 views

CVE-2024-8295 FeehiCMS index.php createBanner unrestricted upload

A vulnerability has been found in FeehiCMS up to 2.1.1 and classified as critical. This vulnerability affects the function createBanner of the file /admin/index.php?r=banner%2Fbanner-create. The manipulation of the argument BannerFormimg leads to unrestricted upload. The attack can be initiated...

5.3CVSS6.2AI score
SaveExploits0References6
Cvelist
Cvelist
added 2024/08/29 12:00 p.m.44 views

CVE-2024-8295 FeehiCMS index.php createBanner unrestricted upload

A vulnerability has been found in FeehiCMS up to 2.1.1 and classified as critical. This vulnerability affects the function createBanner of the file /admin/index.php?r=banner%2Fbanner-create. The manipulation of the argument BannerFormimg leads to unrestricted upload. The attack can be initiated...

6.5CVSS0.00756EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/08/29 12:00 p.m.11 views

CVE-2024-8295 FeehiCMS index.php createBanner unrestricted upload

A vulnerability has been found in FeehiCMS up to 2.1.1 and classified as critical. This vulnerability affects the function createBanner of the file /admin/index.php?r=banner%2Fbanner-create. The manipulation of the argument BannerFormimg leads to unrestricted upload. The attack can be initiated...

6.5CVSS6.4AI score0.00756EPSS
SaveExploits1References4
NVD
NVD
added 2024/08/29 11:15 a.m.40 views

CVE-2024-8294

A vulnerability, which was classified as critical, was found in FeehiCMS up to 2.1.1. This affects the function update of the file /admin/index.php?r=friendly-link%2Fupdate. The manipulation of the argument FriendlyLinkimage leads to unrestricted upload. It is possible to initiate the attack...

9.8CVSS0.00756EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/08/29 11:00 a.m.46 views

CVE-2024-8294 FeehiCMS index.php update unrestricted upload

A vulnerability, which was classified as critical, was found in FeehiCMS up to 2.1.1. This affects the function update of the file /admin/index.php?r=friendly-link%2Fupdate. The manipulation of the argument FriendlyLinkimage leads to unrestricted upload. It is possible to initiate the attack...

6.5CVSS0.00756EPSS
SaveExploits1References4
OSV
OSV
added 2024/08/29 11:00 a.m.12 views

CVE-2024-8294 FeehiCMS index.php update unrestricted upload

A vulnerability, which was classified as critical, was found in FeehiCMS up to 2.1.1. This affects the function update of the file /admin/index.php?r=friendly-link%2Fupdate. The manipulation of the argument FriendlyLinkimage leads to unrestricted upload. It is possible to initiate the attack...

5.3CVSS5.9AI score
SaveExploits0References6
CVE
CVE
added 2024/08/29 11:00 a.m.62 views

CVE-2024-8294

CVE-2024-8294 affects FeehiCMS up to version 2.1.1. The issue is an unrestricted file upload in the update function at /admin/index.php?r=friendly-link%2Fupdate, caused by unsafely handling the FriendlyLink[image] parameter. Exploitation is remote and publicly disclosed; multiple sources corrobor...

9.8CVSS8AI score0.00756EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/08/29 11:00 a.m.12 views

CVE-2024-8294 FeehiCMS index.php update unrestricted upload

A vulnerability, which was classified as critical, was found in FeehiCMS up to 2.1.1. This affects the function update of the file /admin/index.php?r=friendly-link%2Fupdate. The manipulation of the argument FriendlyLinkimage leads to unrestricted upload. It is possible to initiate the attack...

6.5CVSS6.4AI score0.00756EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/08/29 12:00 a.m.14 views

PT-2024-38923 · Feehicms · Feehicms

Name of the Vulnerable Software and Affected Versions: FeehiCMS versions up to 2.1.1 Description: A critical issue affects the insert function of the file /admin/index.php?r=user%2Fcreate. The manipulation of the argument Useravatar leads to unrestricted upload. The attack may be initiated...

9.8CVSS6.7AI score0.00756EPSS
SaveExploits1References14
CNNVD
CNNVD
added 2024/08/29 12:00 a.m.10 views

FeehiCMS 代码问题漏洞

FeehiCMS is a Php based CMS website builder by Liufee personal developer. A code issue vulnerability exists in FeehiCMS version 2.1.1 and prior versions, which originates from an unverified file upload vulnerability in the Useravatar parameter of the /admin/index.php?r=user%2Fcreate file...

9.8CVSS6.5AI score0.00756EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/08/29 12:00 a.m.12 views

PT-2024-38921 · Feehicms · Feehicms

Name of the Vulnerable Software and Affected Versions: FeehiCMS versions up to 2.1.1 Description: A critical vulnerability was found in FeehiCMS, affecting the function update of the file /admin/index.php?r=friendly-link%2Fupdate. The manipulation of the argument FriendlyLinkimage leads to...

9.8CVSS6.6AI score0.00756EPSS
SaveExploits1References13
CNVD
CNVD
added 2023/06/28 12:00 a.m.69 views

FeehiCMS Arbitrary File Upload Vulnerability (CNVD-2023-58819)

FeehiCMS is a Php-based CMS builder. FeehiCMS version 2.0.8 has an arbitrary file upload vulnerability that can be exploited by remote attackers to execute arbitrary code via the /admin/index.php?r=admin-user%2Fupdate-self component...

9.8CVSS8AI score0.01314EPSS
SaveExploits1References1
OSV
OSV
added 2023/06/20 3:31 p.m.26 views

GHSA-6VF2-MFMR-QQQW Liufee CMS File Upload vulnerability

File Upload vulnerability in Liufee CMS, AKA Feehicms v.2.0.8 allows a remote attacker to execute arbitrary code via the /admin/index.php?r=admin-user%2Fupdate-self component...

9.8CVSS9.6AI score0.01314EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2023/06/20 3:31 p.m.38 views

Liufee CMS File Upload vulnerability

File Upload vulnerability in Liufee CMS, AKA Feehicms v.2.0.8 allows a remote attacker to execute arbitrary code via the /admin/index.php?r=admin-user%2Fupdate-self component...

9.8CVSS7.8AI score0.01314EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2023/06/20 3:15 p.m.11 views

CVE-2020-21489

File Upload vulnerability in Feehicms v.2.0.8 allows a remote attacker to execute arbitrary code via the /admin/index.php?r=admin-user%2Fupdate-self component...

9.8CVSS8.1AI score
SaveExploits0References1
Rows per page
Query Builder