3 matches found
Sql injection
FDCMS aka Fangfa Content Management System 4.0 contains a front-end SQL injection via Admin/Lib/Action/FloginAction.class.php...
7.5CVSS9.8AI score0.01133EPSS
SaveExploits1References1Affected Software1
PT-2021-11766
Name of the Vulnerable Software and Affected Versions: FDCMS aka Fangfa Content Management System version 4.0 Description: The issue is related to a front-end SQL injection in FDCMS. This occurs via the Admin/Lib/Action/FloginAction.class.php file. Recommendations: For FDCMS version 4.0, update t...
9.8CVSS0.01133EPSS
SaveExploits1References5
CVE-2020-35441: Improper Neutralization of Special Elements used in an SQL Command
FDCMS aka Fangfa Content Management System 4.0 contains a front-end SQL injection via Admin/Lib/Action/FloginAction.class.php...
9.8CVSS5.8AI score0.01133EPSS
SaveExploits1References2
20