Vendors / 07FLY Records 14 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 0
Exploited now 07FLY records in CISA KEV No 07FLY vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 76
Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to execute arbitrary code via the id parameter of the del.html component.
CVSS 3.1 CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.00298 · Published 2025-02-28 · No fix listed CWE-352
Priority MEDIUM 57
A vulnerability classified as problematic was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.3.9.
CVSS 4.0 MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00308 · Published 2025-07-06 · No fix listed CWE-352
Priority MEDIUM 56
A vulnerability classified as critical was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.0.
CVSS 4.0 MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00628 · Published 2024-10-13 · No fix listed CWE-434
Priority MEDIUM 56
A vulnerability classified as critical has been found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.0.
CVSS 4.0 MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00628 · Published 2024-10-12 · No fix listed CWE-434
Priority MEDIUM 56
A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM 1.3.8.
CVSS 4.0 MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00417 · Published 2024-10-11 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM 1.3.8.
CVSS 4.0 MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00628 · Published 2024-10-11 · No fix listed CWE-434
Priority MEDIUM 55
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component http://erp.07fly.net:80/oa/OaSchedule/add.html.
CVSS 3.1 MEDIUM 4.7· Network · No auth · User interaction · EPSS 0.00185 · Published 2024-11-08 · No fix listed CWE-352
Priority MEDIUM 50
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/doAdminAction.php?act=editShop&shopId.
CVSS 3.1 LOW 3.5· Network · High privileges · User interaction · EPSS 0.00159 · Published 2025-01-16 · No fix listed CWE-352
Priority MEDIUM 50
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/add.html.
CVSS 3.1 LOW 3.5· Network · High privileges · User interaction · EPSS 0.00159 · Published 2025-01-16 · No fix listed CWE-352
Priority LOW 21
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component 'erp.07fly.net:80/admin/SysNotifyUser/del.html?id=93'.
CVSS 3.1 MEDIUM 4.7· Network · No auth · User interaction · EPSS 0.00213 · Published 2024-11-14 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
2 0 10 2 0
THREATIST.IORead the docs