Vulnerabilities

TI-2020-17977 CVE-2020-35442 · GHSA-5gwc-mqh2-68c6

FDCMS (also known as Fangfa Content Management System) 4.0 allows remote attackers to get…

MEDIUM 45

FDCMS (also known as Fangfa Content Management System) 4.0 allows remote attackers to get a webshell in the background via Front/lib/Action/FindexAction.class.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01684 Published 2021-06-02 No fix listed CWE-434

TI-2020-17976 CVE-2020-35441 · GHSA-9w67-r7qm-ccv3

FDCMS (aka Fangfa Content Management System) 4.0 contains a front-end SQL injection via…

MEDIUM 44

FDCMS (aka Fangfa Content Management System) 4.0 contains a front-end SQL injection via Admin/Lib/Action/FloginAction.class.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01133 Published 2021-06-02 No fix listed CWE-89

TI-2018-12181 CVE-2018-17048 · GHSA-g4r5-jgp4-qm3c

admin/Lib/Action/FpluginAction.class.php in FDCMS (aka Fangfa Content Manage System) 4.2 allows SQL Injection.

LOW 36

admin/Lib/Action/FpluginAction.class.php in FDCMS (aka Fangfa Content Manage System) 4.2 allows SQL Injection.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01737 Published 2019-05-16 No fix listed CWE-89

Vulnerabilities

Filters

FDCMS (also known as Fangfa Content Management System) 4.0 allows remote attackers to get…

FDCMS (aka Fangfa Content Management System) 4.0 contains a front-end SQL injection via…

admin/Lib/Action/FpluginAction.class.php in FDCMS (aka Fangfa Content Manage System) 4.2 allows SQL Injection.