Skip to content
Noroxi

feifeicms records

6 published records for vendor feifeicms.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 21
  3. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2019-9825
    40Plan

    FeiFeiCMS 4.1.190209 allows remote attackers to upload and execute arbitrary PHP code by visiting index.php?s=Admin-Index to modify the set

    CriticalCVSS 9.8No exploitEPSS 2%

    feifeicms · feifeicmsMar 14, 2019

  • CVE-2020-17563
    37Monitor

    Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to " /index.php?s=/admi

    CriticalCVSS 9.1No exploitEPSS 3%

    feifeicms · feifeicmsApr 22, 2021

  • CVE-2020-17564
    37Monitor

    Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to the " Admin/DataActi

    CriticalCVSS 9.1No exploitEPSS 3%

    feifeicms · feifeicmsApr 22, 2021

  • CVE-2019-8412
    36Monitor

    FeiFeiCms 4.0.181010 on Windows allows remote attackers to read or delete arbitrary files via index.php?s=Admin-Data-Down-id-..\ or index.ph

    HighCVSS 8.8No exploitEPSS 3%

    feifeicms · feifeicmsFeb 17, 2019

  • CVE-2020-18418
    35Monitor

    A Cross site request forgery (CSRF) vulnerability was discovered in FeiFeiCMS v4.1.190209, which allows attackers to create administrator ac

    HighCVSS 8.8No exploitEPSS 0%

    feifeicms · feifeicmsJun 27, 2023

  • CVE-2023-1565
    21Monitor

    FeiFeiCMS Extension Tool slide_add.html cross site scripting

    MediumCVSS 5.4No exploitEPSS 1%

    feifeicms · feifeicmsMar 22, 2023