Read the docs

Lfdycms

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Lfdycms records in CISA KEV

No Lfdycms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Lei Feng Tv Cms 3 records LOW Lfcms 2 records MEDIUM

Records

5 records

TI-2018-09047 CVE-2018-12603 · GHSA-3hrj-frfj-gwp3

Cross-site request forgery (CSRF) vulnerability in admin.php in LFCMS 3.7.0 allows remote…

Priority MEDIUM 44

Cross-site request forgery (CSRF) vulnerability in admin.php in LFCMS 3.7.0 allows remote attackers to hijack the authentication of unspecified users for requests that add administrator users via the s parameter, a relat…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.03419 Published 2018-06-25 No fix listed CWE-352
TI-2018-14625 CVE-2018-20604 · GHSA-vq7x-jpfh-39f4

Lei Feng TV CMS (aka LFCMS) 3.8.6 allows Directory Traversal via crafted use of ..* in…

Priority LOW 25

Lei Feng TV CMS (aka LFCMS) 3.8.6 allows Directory Traversal via crafted use of ..* in Template/edit/path URIs, as demonstrated by the admin.php?s=/Template/edit/path/*web*..*..*..*..*1.txt.html URI to read the 1.txt fil…

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.01369 Published 2018-12-30 No fix listed CWE-22
Open these records in search →