Vulnerabilities

TI-2025-06440 CVE-2025-7078 · GHSA-7g5c-2436-6692

07FLYCMS/07FLY-CMS/07FlyCRM cross-site request forgery

MEDIUM 57

A vulnerability classified as problematic was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.3.9.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00308 Published 2025-07-06 No fix listed CWE-352

TI-2025-18988 CVE-2025-25379 · GHSA-vqx8-mvcx-mx39

Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to…

HIGH 76

Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to execute arbitrary code via the id parameter of the del.html component.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00298 Published 2025-02-28 No fix listed CWE-352

TI-2024-37964 CVE-2024-57611 · GHSA-pv2j-88c7-fj84

07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via…

MEDIUM 50

07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/doAdminAction.php?act=editShop&shopId.

CVSS 3.1LOW 3.5 Network High privileges User interaction EPSS 0.00159 Published 2025-01-16 No fix listed CWE-352

TI-2024-37805 CVE-2024-57159 · GHSA-fw54-qxpm-m379

07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via…

MEDIUM 50

07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/add.html.

CVSS 3.1LOW 3.5 Network High privileges User interaction EPSS 0.00159 Published 2025-01-16 No fix listed CWE-352

TI-2024-34263 CVE-2024-51156 · GHSA-j8fq-9f7x-5883

07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…

LOW 21

07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component 'erp.07fly.net:80/admin/SysNotifyUser/del.html?id=93'.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00213 Published 2024-11-14 No fix listed CWE-352

TI-2024-34264 CVE-2024-51157 · GHSA-mgmf-6j2f-mh6r

07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…

MEDIUM 55

07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component http://erp.07fly.net:80/oa/OaSchedule/add.html.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00185 Published 2024-11-08 No fix listed CWE-352

TI-2024-09188 CVE-2024-9904 · GHSA-v8p3-f3p7-66xj

07FLYCMS/07FLY-CMS/07FlyCRM pictureUpload unrestricted upload

MEDIUM 56

A vulnerability classified as critical was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00628 Published 2024-10-13 No fix listed CWE-434

TI-2024-09187 CVE-2024-9903 · GHSA-mq8p-chwh-jrj5

07FLYCMS/07FLY-CMS/07FlyCRM fileUpload unrestricted upload

MEDIUM 56

A vulnerability classified as critical has been found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00628 Published 2024-10-12 No fix listed CWE-434

TI-2024-09146 CVE-2024-9856 · GHSA-pj3m-fgm6-v75m

07FLYCMS/07FLY-CMS/07FlyCRM System Settings Page cross site scripting

MEDIUM 56

A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM 1.3.8.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00417 Published 2024-10-11 No fix listed CWE-79

TI-2024-09145 CVE-2024-9855 · GHSA-7hcw-752h-p5pp

07FLYCMS/07FLY-CMS/07FlyCRM Module Plug-In sysmodule_1 uploadFile unrestricted upload

MEDIUM 56

A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM 1.3.8.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00628 Published 2024-10-11 No fix listed CWE-434

Vulnerabilities

Filters