Lfdycms

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Lfdycms records in CISA KEV

No Lfdycms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Lei Feng Tv Cms 3 records LOW Lfcms 2 records MEDIUM

Records

2 records in Lfcms · all components

TI-2018-09047 CVE-2018-12603 · GHSA-3hrj-frfj-gwp3

Cross-site request forgery (CSRF) vulnerability in admin.php in LFCMS 3.7.0 allows remote…

MEDIUM 44

Cross-site request forgery (CSRF) vulnerability in admin.php in LFCMS 3.7.0 allows remote attackers to hijack the authentication of unspecified users for requests that add administrator users via the s parameter, a relat…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.03419 Published 2018-06-25 No fix listed CWE-352

TI-2018-09046 CVE-2018-12602 · GHSA-gj5m-9ghf-2rp3

A CSRF vulnerability exists in LFCMS 3.7.0: users can be added arbitrarily.

MEDIUM 43

A CSRF vulnerability exists in LFCMS 3.7.0: users can be added arbitrarily.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02942 Published 2018-06-25 No fix listed CWE-352

Open these records in search →

Critical	0
High	4
Medium	1
Low	0
No CVSS	0