Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

9 records

Vendor: 07FLY Component: Customer Relationship Management Clear all filters
TI-2025-06440 CVE-2025-7078 · GHSA-7g5c-2436-6692

07FLYCMS/07FLY-CMS/07FlyCRM cross-site request forgery

Priority MEDIUM 57

A vulnerability classified as problematic was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.3.9.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00308 Published 2025-07-06 No fix listed CWE-352
TI-2024-09187 CVE-2024-9903 · GHSA-mq8p-chwh-jrj5

07FLYCMS/07FLY-CMS/07FlyCRM fileUpload unrestricted upload

Priority MEDIUM 56

A vulnerability classified as critical has been found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00628 Published 2024-10-12 No fix listed CWE-434
TI-2023-04622 CVE-2023-5020 · GHSA-q6jm-c3w4-43r4

07FLY CRM Administrator Login Page sql injection

Priority MEDIUM 44

A vulnerability, which was classified as critical, has been found in 07FLY CRM V2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00819 Published 2023-09-17 No fix listed CWE-89
TI-2023-02864 CVE-2023-3058 · GHSA-4jgq-px27-8954

07FLY CRM User Profile cross site scripting

Priority MEDIUM 58

A vulnerability was found in 07FLY CRM up to 1.2.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00564 Published 2023-06-02 No fix listed CWE-79