leefish records

5 published records for vendor leefish.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

5 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
37Monitor	CVE-2019-25471No exploit	FileThingie 2.5.7 Arbitrary File Upload via ft2.phpleefish · file thingie · CWE-22 pre-auth RCE Path traversal File upload	Critical9.3	—	0.9%	Mar 11, 2026
37Monitor	CVE-2023-53942No exploit	File Thingie 2.5.7 Authenticated Arbitrary File Upload Remote Code Executionleefish · file thingie · CWE-434 RCE File upload	Critical9.4	—	0.6%	Dec 18, 2025
26Monitor	CVE-2026-30578No exploit	File Thinghie 2.5.7 is vulnerable to Cross Site Scripting (XSS).leefish · file thingie · CWE-79 XSS	Medium6.5	—	0.2%	Mar 20, 2026
26Monitor	CVE-2026-30579No exploit	File Thingie 2.5.7 is vulnerable to Cross Site Scripting (XSS).leefish · file thingie · CWE-79 XSS	Medium6.5	—	0.2%	Mar 20, 2026
17Monitor	CVE-2026-30580No exploit	File Thingie 2.5.7 is vulnerable to Directory Traversal.leefish · file thingie · CWE-22 Path traversal	Medium4.3	—	0.6%	Mar 20, 2026

CVE-2019-25471
37Monitor
FileThingie 2.5.7 Arbitrary File Upload via ft2.php
CriticalCVSS 9.3No exploitEPSS 1%
leefish · file thingieMar 11, 2026
CVE-2023-53942
37Monitor
File Thingie 2.5.7 Authenticated Arbitrary File Upload Remote Code Execution
CriticalCVSS 9.4No exploitEPSS 1%
- RCE
- File upload
leefish · file thingieDec 18, 2025
CVE-2026-30578
26Monitor
File Thinghie 2.5.7 is vulnerable to Cross Site Scripting (XSS).
MediumCVSS 6.5No exploitEPSS 0%
- XSS
leefish · file thingieMar 20, 2026
CVE-2026-30579
26Monitor
File Thingie 2.5.7 is vulnerable to Cross Site Scripting (XSS).
MediumCVSS 6.5No exploitEPSS 0%
- XSS
leefish · file thingieMar 20, 2026
CVE-2026-30580
17Monitor
File Thingie 2.5.7 is vulnerable to Directory Traversal.
MediumCVSS 4.3No exploitEPSS 1%
- Path traversal
leefish · file thingieMar 20, 2026