54 matches found
FeiFeiCms v4.1.190209 Has Arbitrary File Read Vulnerability
FeiFeiCms is a PHP movie program. FeiFeiCms v4.1.190209 suffers from an arbitrary file read vulnerability, which stems from failing to filter the input of . / filtering, an attacker can exploit this vulnerability to read arbitrary files...
CVE-2019-9825
FeiFeiCMS 4.1.190209 allows remote attackers to upload and execute arbitrary PHP code by visiting index.php?s=Admin-Index to modify the set of allowable file extensions, as demonstrated by adding php to the default jpg,gif,png,jpeg setting, and then using the "add article" feature...
CVE-2019-9825
FeiFeiCMS 4.1.190209 allows remote attackers to upload and execute arbitrary PHP code by visiting index.php?s=Admin-Index to modify the set of allowable file extensions, as demonstrated by adding php to the default jpg,gif,png,jpeg setting, and then using the "add article" feature...
Design/Logic Flaw
FeiFeiCMS 4.1.190209 allows remote attackers to upload and execute arbitrary PHP code by visiting index.php?s=Admin-Index to modify the set of allowable file extensions, as demonstrated by adding php to the default jpg,gif,png,jpeg setting, and then using the "add article" feature...
CVE-2019-9825
FeiFeiCMS 4.1.190209 allows remote attackers to upload and execute arbitrary PHP code by visiting index.php?s=Admin-Index to modify the set of allowable file extensions, as demonstrated by adding php to the default jpg,gif,png,jpeg setting, and then using the "add article" feature...
CVE-2019-9825
FeiFeiCMS 4.1.190209 is affected by CVE-2019-9825. The vulnerability allows remote attackers to upload and execute arbitrary PHP code by visiting index.php?s=Admin-Index and modifying the set of allowable file extensions (e.g., adding PHP to the default image extensions). The attacker can then us...
CVE-2019-8412
FeiFeiCms 4.0.181010 on Windows allows remote attackers to read or delete arbitrary files via index.php?s=Admin-Data-Down-id-..\ or index.php?s=Admin-Data-Del-id-..\ directory traversal...
Directory traversal
FeiFeiCms 4.0.181010 on Windows allows remote attackers to read or delete arbitrary files via index.php?s=Admin-Data-Down-id-..\ or index.php?s=Admin-Data-Del-id-..\ directory traversal...
CVE-2019-8412
FeiFeiCms 4.0.181010 on Windows is affected by a directory traversal in index.php?s=Admin-Data-Down-id-..\ or index.php?s=Admin-Data-Del-id-.. that allows remote attackers to read or delete arbitrary files. The provided sources confirm this vulnerability; no patch/remediation details are included...
CVE-2019-8412
FeiFeiCms 4.0.181010 on Windows allows remote attackers to read or delete arbitrary files via index.php?s=Admin-Data-Down-id-..\ or index.php?s=Admin-Data-Del-id-..\ directory traversal...
FeiFeiCms 4.0.181010 version of the foreground there are logic flaws vulnerability
FeiFeiCms is developed by PHP+Mysql technology and can run on windows and Linux system platform. A logic flaw exists in the frontend of FeiFeiCms version 4.0.181010, which stems from a failure to properly filter user input and can be exploited by an attacker to modify user information...
Code Execution Vulnerability in the Backend of Feifei Movie Navigation System
FeiFei Film and TV Navigation System FeiFeiCms is a free and open source PHP movie program. A code execution vulnerability exists in the background of FeiFeiCms. An attacker can exploit the vulnerability to execute arbitrary code...
