CVE-2020-35441

CVE-2020-35441 corresponds to a SQL injection in FDCMS 4.0 exposed via the path Admin/Lib/Action/FloginAction.class.php . The connected sources consistently describe a vulnerability that would allow an attacker to manipulate SQL queries within the web-facing component and “obtain database records...

CVE-2020-35442

FDCMS (Fangfa Content Management System) 4.0 is affected by a file inclusion vulnerability in Front/lib/Action/FindexAction.class.php, allowing remote attackers to obtain a webshell in the background. The issue is described across multiple sources (CNVD/CNNVD) as a PHP-based vulnerability in vers...

CVE-2018-17048

CVE-2018-17048 affects FDCMS (Fangfa Content Management System) version 4.2. The vulnerability is an SQL Injection in file admin/Lib/Action/FpluginAction.class.php , with the root cause described as unsafely constructed SQL leading to partial/high impact on confidentiality depending on access. Do...