07FLY records

14 published records for vendor 07fly.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

14 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2023-5020No exploit	07FLY CRM Administrator Login Page sql injection07fly · customer relationship management · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.8%	Sep 17, 2023
38Monitor	CVE-2025-25379No exploit	Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to execute arbitrary code via the id parameter of the 07fly · 07flycms · CWE-352 pre-auth RCE CSRF	Critical9.6	—	0.3%	Feb 28, 2025
21Monitor	CVE-2023-3058No exploit	07FLY CRM User Profile cross site scripting07fly · customer relationship management · CWE-79 XSS	Medium5.4	—	0.6%	Jun 2, 2023
20Monitor	CVE-2024-9904No exploit	07FLYCMS/07FLY-CMS/07FlyCRM pictureUpload unrestricted upload07fly · 07flycms · CWE-434 File upload	Medium5.1	—	0.6%	Oct 12, 2024
20Monitor	CVE-2024-9855No exploit	07FLYCMS/07FLY-CMS/07FlyCRM Module Plug-In sysmodule_1 uploadFile unrestricted upload07fly · 07flycms · CWE-434 File upload	Medium5.1	—	0.6%	Oct 11, 2024
20Monitor	CVE-2024-9903No exploit	07FLYCMS/07FLY-CMS/07FlyCRM fileUpload unrestricted upload07fly · 07flycms · CWE-434 File upload	Medium5.1	—	0.6%	Oct 12, 2024
20Monitor	CVE-2024-9856No exploit	07FLYCMS/07FLY-CMS/07FlyCRM System Settings Page cross site scripting07fly · 07flycms · CWE-79 XSS	Medium5.1	—	0.4%	Oct 11, 2024
18Monitor	CVE-2024-51156No exploit	07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component 'erp.07fly.net:80/admin/SysNotifyUser/del.ht07fly · 07flycms · CWE-352 Pre-auth CSRF	Medium4.7	—	0.2%	Nov 14, 2024
18Monitor	CVE-2024-51157No exploit	07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component http://erp.07fly.net:80/oa/OaSchedule/add.ht07fly · 07flycms · CWE-352 Pre-auth CSRF	Medium4.7	—	0.2%	Nov 8, 2024
17Monitor	CVE-2024-57161No exploit	07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/edit.html07fly · customer relationship management · CWE-352 Pre-auth CSRF	Medium4.3	—	0.2%	Jan 16, 2025
17Monitor	CVE-2024-57160No exploit	07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaTask/edit.html.07fly · customer relationship management · CWE-352 Pre-auth CSRF	Medium4.3	—	0.2%	Jan 16, 2025
14Monitor	CVE-2024-57611No exploit	07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/doAdminAction.php?act=editShop&shopId.07fly · 07flycms · CWE-352 CSRF	Low3.5	—	0.2%	Jan 16, 2025
14Monitor	CVE-2024-57159No exploit	07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/add.html.07fly · 07flycms · CWE-352 CSRF	Low3.5	—	0.2%	Jan 16, 2025
8Monitor	CVE-2025-7078No exploit	07FLYCMS/07FLY-CMS/07FlyCRM cross-site request forgery07fly · 07flycms · CWE-352 Pre-auth CSRF	Low2.1	—	0.3%	Jul 6, 2025

CVE-2023-5020
39Monitor
07FLY CRM Administrator Login Page sql injection
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
07fly · customer relationship managementSep 17, 2023
CVE-2025-25379
38Monitor
Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to execute arbitrary code via the id parameter of the
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- CSRF
07fly · 07flycmsFeb 28, 2025
CVE-2023-3058
21Monitor
07FLY CRM User Profile cross site scripting
MediumCVSS 5.4No exploitEPSS 1%
- XSS
07fly · customer relationship managementJun 2, 2023
CVE-2024-9904
20Monitor
07FLYCMS/07FLY-CMS/07FlyCRM pictureUpload unrestricted upload
MediumCVSS 5.1No exploitEPSS 1%
- File upload
07fly · 07flycmsOct 12, 2024
CVE-2024-9855
20Monitor
07FLYCMS/07FLY-CMS/07FlyCRM Module Plug-In sysmodule_1 uploadFile unrestricted upload
MediumCVSS 5.1No exploitEPSS 1%
- File upload
07fly · 07flycmsOct 11, 2024
CVE-2024-9903
20Monitor
07FLYCMS/07FLY-CMS/07FlyCRM fileUpload unrestricted upload
MediumCVSS 5.1No exploitEPSS 1%
- File upload
07fly · 07flycmsOct 12, 2024
CVE-2024-9856
20Monitor
07FLYCMS/07FLY-CMS/07FlyCRM System Settings Page cross site scripting
MediumCVSS 5.1No exploitEPSS 0%
- XSS
07fly · 07flycmsOct 11, 2024
CVE-2024-51156
18Monitor
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component 'erp.07fly.net:80/admin/SysNotifyUser/del.ht
MediumCVSS 4.7No exploitEPSS 0%
- Pre-auth
- CSRF
07fly · 07flycmsNov 14, 2024
CVE-2024-51157
18Monitor
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component http://erp.07fly.net:80/oa/OaSchedule/add.ht
MediumCVSS 4.7No exploitEPSS 0%
- Pre-auth
- CSRF
07fly · 07flycmsNov 8, 2024
CVE-2024-57161
17Monitor
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/edit.html
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
- CSRF
07fly · customer relationship managementJan 16, 2025
CVE-2024-57160
17Monitor
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaTask/edit.html.
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
- CSRF
07fly · customer relationship managementJan 16, 2025
CVE-2024-57611
14Monitor
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/doAdminAction.php?act=editShop&shopId.
LowCVSS 3.5No exploitEPSS 0%
- CSRF
07fly · 07flycmsJan 16, 2025
CVE-2024-57159
14Monitor
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/add.html.
LowCVSS 3.5No exploitEPSS 0%
- CSRF
07fly · 07flycmsJan 16, 2025
CVE-2025-7078
8Monitor
07FLYCMS/07FLY-CMS/07FlyCRM cross-site request forgery
LowCVSS 2.1No exploitEPSS 0%
- Pre-auth
- CSRF
07fly · 07flycmsJul 6, 2025