FeehiCMS 安全漏洞

FeehiCMS is a PHP-based CMS website building system developed by Liufee’s individual developers. The FeehiCMS v2.1.1 version contains a security vulnerability. This vulnerability stems from a storage-type cross-site scripting issue with the Title parameter used for creating/editing modules, which...

CVE-2025-45343

An issue in Tenda W18E v.2.0 v.16.01.0.11 allows an attacker to execute arbitrary code via the editing functionality of the account module in the goform/setmodules route...

CVE-2025-45343

An issue in Tenda W18E v.2.0 v.16.01.0.11 allows an attacker to execute arbitrary code via the editing functionality of the account module in the goform/setmodules route...

CVE-2025-45343

An issue in Tenda W18E v.2.0 v.16.01.0.11 allows an attacker to execute arbitrary code via the editing functionality of the account module in the goform/setmodules route...

CVE-2025-45343

An issue in Tenda W18E v.2.0 v.16.01.0.11 allows an attacker to execute arbitrary code via the editing functionality of the account module in the goform/setmodules route...

CVE-2022-34120

Barangay Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via the module editing function at /pages/activity/activity.php...

CVE-2022-34120

Barangay Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via the module editing function at /pages/activity/activity.php...

CVE-2022-34120

Barangay Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via the module editing function at /pages/activity/activity.php...

Remote code execution

Barangay Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via the module editing function at /pages/activity/activity.php...

CVE-2022-34120

CVE-2022-34120 affects Barangay Management System v1.0. A remote code execution exists via the module editing function at /pages/activity/activity.php, with several sources describing an arbitrary file upload path in the Activity module that enables code execution. The NVD entry lists CVSS3.1: AV...

CVE-2022-34120: Unrestricted Upload of File with Dangerous Type

Barangay Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via the module editing function at /pages/activity/activity.php...

PT-2022-22014 · Unknown · Barangay Management System

Name of the Vulnerable Software and Affected Versions: Barangay Management System version 1.0 Description: The Barangay Management System contains a remote code execution RCE issue via the module editing function at the "/pages/activity/activity.php" endpoint. This allows for potential code...

CVE-2022-34024

Barangay Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the resident module editing function at /bmis/pages/resident/resident.php...

Privilege escalation

Barangay Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the resident module editing function at /bmis/pages/resident/resident.php...

CVE-2022-34024: Unrestricted Upload of File with Dangerous Type

Barangay Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the resident module editing function at /bmis/pages/resident/resident.php...

CVE-2020-21434

Maccms 10 contains a cross-site scripting XSS vulnerability in the Editing function under the Member module. This vulnerability is exploited via a crafted payload in the nickname text field...