Lucene search
+L

242 matches found

NVD
NVD
added 2023/06/20 3:15 p.m.37 views

CVE-2020-21489

File Upload vulnerability in Feehicms v.2.0.8 allows a remote attacker to execute arbitrary code via the /admin/index.php?r=admin-user%2Fupdate-self component...

9.8CVSS9.6AI score0.01314EPSS
SaveExploits1References1
Prion
Prion
added 2023/06/20 3:15 p.m.23 views

Unrestricted file upload

File Upload vulnerability in Feehicms v.2.0.8 allows a remote attacker to execute arbitrary code via the /admin/index.php?r=admin-user%2Fupdate-self component...

7.5CVSS9.6AI score0.01314EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2023/06/20 12:00 a.m.65 views

CVE-2020-21489

CVE-2020-21489 affects FeehiCMS v2.0.8, describing an arbitrary file upload vulnerability that enables a remote attacker to execute code via the /admin/index.php?r=admin-user%2Fupdate-self component. Multiple sources (NVD, Red Hat, CNVD, OSV, GHSA, CNNVD) reiterate the same vulnerability with a h...

9.8CVSS9.6AI score0.01314EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/06/20 12:00 a.m.35 views

CVE-2020-21489

File Upload vulnerability in Feehicms v.2.0.8 allows a remote attacker to execute arbitrary code via the /admin/index.php?r=admin-user%2Fupdate-self component...

9.7AI score0.01314EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/06/20 12:00 a.m.12 views

PT-2023-11592 · Feehicms · Feehicms

Name of the Vulnerable Software and Affected Versions: Feehicms version 2.0.8 Description: The issue allows a remote attacker to execute arbitrary code via the "/admin/index.php?r=admin-user%2Fupdate-self" component. This is a File Upload vulnerability, which can be exploited by a remote attacker...

9.8CVSS7.7AI score0.01314EPSS
SaveExploits1References8
Vulnrichment
Vulnrichment
added 2023/06/20 12:00 a.m.12 views

CVE-2020-21489

File Upload vulnerability in Feehicms v.2.0.8 allows a remote attacker to execute arbitrary code via the /admin/index.php?r=admin-user%2Fupdate-self component...

7.7AI score0.01314EPSS
SaveExploits1References1
Veracode
Veracode
added 2022/12/21 6:18 a.m.21 views

Cross-site Scripting (XSS)

feehi/feehicms is vulnerable to cross site scripting. The vulnerability exists due to improper user-input sanitization, which allows a remote attacker to run arbitrary code via uploading a crafted XML file...

5.4CVSS5.8AI score0.00506EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2022/12/15 9:30 p.m.48 views

GHSA-GQGQ-784Q-V9XP FeehiCMS Cross Site Scripting vulnerability

Cross Site Scripting XSS vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the title field of the create article page...

5.4CVSS5.3AI score0.00506EPSS
SaveExploits1References3
OSV
OSV
added 2022/12/15 9:30 p.m.35 views

GHSA-6VH6-72G6-XQX2 FeehiCMS Cross Site Scripting vulnerability

Cross Site Scripting XSS vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbirtary code via the callback parameter to /cms/notify...

5.4CVSS5.2AI score0.00506EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2022/12/15 9:30 p.m.40 views

FeehiCMS Unrestricted Upload vulnerability

File Upload vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via crafted image upload...

5.4CVSS6AI score0.00464EPSS
SaveExploits1References3Affected Software1
Github Security Blog
Github Security Blog
added 2022/12/15 9:30 p.m.33 views

FeehiCMS Cross Site Scripting vulnerability

Cross Site Scripting XSS vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via the user name field of the login page...

6.1CVSS6.1AI score0.00423EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/12/15 9:30 p.m.28 views

GHSA-8VJP-HFGH-68RJ FeehiCMS Cross Site Scripting vulnerability

Cross Site Scripting XSS vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the username field of the admin log in page...

5.4CVSS5.3AI score0.00506EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2022/12/15 9:30 p.m.50 views

FeehiCMS Cross Site Scripting vulnerability

Cross Site Scripting XSS vulnerability in FeehiCMS 2.1.1 allows remote attackers to run arbitrary code via upload of crafted XML file...

5.4CVSS5.7AI score0.00506EPSS
SaveExploits1References3Affected Software1
Github Security Blog
Github Security Blog
added 2022/12/15 9:30 p.m.35 views

FeehiCMS Cross Site Scripting vulnerability

Cross Site Scripting XSS vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the title field of the create article page...

5.4CVSS5.6AI score0.00506EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/12/15 9:30 p.m.56 views

GHSA-M54V-GV8P-9PQP FeehiCMS Cross Site Scripting vulnerability

Cross Site Scripting XSS vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via the user name field of the login page...

6.1CVSS6AI score0.00423EPSS
SaveExploits1References3
OSV
OSV
added 2022/12/15 9:30 p.m.33 views

GHSA-XV8H-43H9-V3JQ FeehiCMS Cross Site Scripting vulnerability

Cross Site Scripting XSS vulnerability in FeehiCMS 2.1.1 allows remote attackers to run arbitrary code via upload of crafted XML file...

5.4CVSS5.4AI score0.00506EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2022/12/15 9:30 p.m.30 views

FeehiCMS Cross Site Scripting vulnerability

Cross Site Scripting XSS vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the username field of the admin log in page...

5.4CVSS5.6AI score0.00506EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/12/15 9:30 p.m.48 views

GHSA-67MH-HW8V-X8V9 FeehiCMS Unrestricted Upload vulnerability

File Upload vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via crafted image upload...

5.4CVSS5.7AI score0.00464EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2022/12/15 9:30 p.m.53 views

FeehiCMS Cross Site Scripting vulnerability

Cross Site Scripting XSS vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbirtary code via the callback parameter to /cms/notify...

5.4CVSS5.4AI score0.00506EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/12/15 9:30 p.m.70 views

GHSA-PWH3-3PCM-6VJH FeehiCMS vulnerable to Cross Site Scripting

Cross Site Scripting XSS vulnerability in FeehiCMS 2.0.8 allows remote attackers to run arbitrary code via tha lang attribute of an html tag...

6.1CVSS6AI score0.00583EPSS
SaveExploits1References3
Rows per page
Query Builder