07FLY kayıtları

07fly üreticisine ait 14 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 1
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

14 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
39İzleyin	CVE-2023-5020İstismar yok	07FLY CRM Administrator Login Page sql injection07fly · customer relationship management · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%0,8	17 Eyl 2023
38İzleyin	CVE-2025-25379İstismar yok	Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to execute arbitrary code via the id parameter of the 07fly · 07flycms · CWE-352 pre-auth RCE CSRF	Kritik9,6	—	%0,3	28 Şub 2025
21İzleyin	CVE-2023-3058İstismar yok	07FLY CRM User Profile cross site scripting07fly · customer relationship management · CWE-79 XSS	Orta5,4	—	%0,6	2 Haz 2023
20İzleyin	CVE-2024-9904İstismar yok	07FLYCMS/07FLY-CMS/07FlyCRM pictureUpload unrestricted upload07fly · 07flycms · CWE-434 Dosya yükleme	Orta5,1	—	%0,6	12 Eki 2024
20İzleyin	CVE-2024-9855İstismar yok	07FLYCMS/07FLY-CMS/07FlyCRM Module Plug-In sysmodule_1 uploadFile unrestricted upload07fly · 07flycms · CWE-434 Dosya yükleme	Orta5,1	—	%0,6	11 Eki 2024
20İzleyin	CVE-2024-9903İstismar yok	07FLYCMS/07FLY-CMS/07FlyCRM fileUpload unrestricted upload07fly · 07flycms · CWE-434 Dosya yükleme	Orta5,1	—	%0,6	12 Eki 2024
20İzleyin	CVE-2024-9856İstismar yok	07FLYCMS/07FLY-CMS/07FlyCRM System Settings Page cross site scripting07fly · 07flycms · CWE-79 XSS	Orta5,1	—	%0,4	11 Eki 2024
18İzleyin	CVE-2024-51156İstismar yok	07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component 'erp.07fly.net:80/admin/SysNotifyUser/del.ht07fly · 07flycms · CWE-352 Kimlik doğrulamasız CSRF	Orta4,7	—	%0,2	14 Kas 2024
18İzleyin	CVE-2024-51157İstismar yok	07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component http://erp.07fly.net:80/oa/OaSchedule/add.ht07fly · 07flycms · CWE-352 Kimlik doğrulamasız CSRF	Orta4,7	—	%0,2	8 Kas 2024
17İzleyin	CVE-2024-57161İstismar yok	07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/edit.html07fly · customer relationship management · CWE-352 Kimlik doğrulamasız CSRF	Orta4,3	—	%0,2	16 Oca 2025
17İzleyin	CVE-2024-57160İstismar yok	07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaTask/edit.html.07fly · customer relationship management · CWE-352 Kimlik doğrulamasız CSRF	Orta4,3	—	%0,2	16 Oca 2025
14İzleyin	CVE-2024-57611İstismar yok	07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/doAdminAction.php?act=editShop&shopId.07fly · 07flycms · CWE-352 CSRF	Düşük3,5	—	%0,2	16 Oca 2025
14İzleyin	CVE-2024-57159İstismar yok	07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/add.html.07fly · 07flycms · CWE-352 CSRF	Düşük3,5	—	%0,2	16 Oca 2025
8İzleyin	CVE-2025-7078İstismar yok	07FLYCMS/07FLY-CMS/07FlyCRM cross-site request forgery07fly · 07flycms · CWE-352 Kimlik doğrulamasız CSRF	Düşük2,1	—	%0,3	6 Tem 2025

CVE-2023-5020
39İzleyin
07FLY CRM Administrator Login Page sql injection
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
07fly · customer relationship management17 Eyl 2023
CVE-2025-25379
38İzleyin
Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to execute arbitrary code via the id parameter of the
KritikCVSS 9,6İstismar yokEPSS %0
- pre-auth RCE
- CSRF
07fly · 07flycms28 Şub 2025
CVE-2023-3058
21İzleyin
07FLY CRM User Profile cross site scripting
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
07fly · customer relationship management2 Haz 2023
CVE-2024-9904
20İzleyin
07FLYCMS/07FLY-CMS/07FlyCRM pictureUpload unrestricted upload
OrtaCVSS 5,1İstismar yokEPSS %1
- Dosya yükleme
07fly · 07flycms12 Eki 2024
CVE-2024-9855
20İzleyin
07FLYCMS/07FLY-CMS/07FlyCRM Module Plug-In sysmodule_1 uploadFile unrestricted upload
OrtaCVSS 5,1İstismar yokEPSS %1
- Dosya yükleme
07fly · 07flycms11 Eki 2024
CVE-2024-9903
20İzleyin
07FLYCMS/07FLY-CMS/07FlyCRM fileUpload unrestricted upload
OrtaCVSS 5,1İstismar yokEPSS %1
- Dosya yükleme
07fly · 07flycms12 Eki 2024
CVE-2024-9856
20İzleyin
07FLYCMS/07FLY-CMS/07FlyCRM System Settings Page cross site scripting
OrtaCVSS 5,1İstismar yokEPSS %0
- XSS
07fly · 07flycms11 Eki 2024
CVE-2024-51156
18İzleyin
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component 'erp.07fly.net:80/admin/SysNotifyUser/del.ht
OrtaCVSS 4,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
07fly · 07flycms14 Kas 2024
CVE-2024-51157
18İzleyin
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component http://erp.07fly.net:80/oa/OaSchedule/add.ht
OrtaCVSS 4,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
07fly · 07flycms8 Kas 2024
CVE-2024-57161
17İzleyin
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/edit.html
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
07fly · customer relationship management16 Oca 2025
CVE-2024-57160
17İzleyin
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaTask/edit.html.
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
07fly · customer relationship management16 Oca 2025
CVE-2024-57611
14İzleyin
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/doAdminAction.php?act=editShop&shopId.
DüşükCVSS 3,5İstismar yokEPSS %0
- CSRF
07fly · 07flycms16 Oca 2025
CVE-2024-57159
14İzleyin
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/add.html.
DüşükCVSS 3,5İstismar yokEPSS %0
- CSRF
07fly · 07flycms16 Oca 2025
CVE-2025-7078
8İzleyin
07FLYCMS/07FLY-CMS/07FlyCRM cross-site request forgery
DüşükCVSS 2,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
07fly · 07flycms6 Tem 2025