Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Lfdycms Component: Lei Feng Tv Cms Clear all filters
TI-2018-14625 CVE-2018-20604 · GHSA-vq7x-jpfh-39f4

Lei Feng TV CMS (aka LFCMS) 3.8.6 allows Directory Traversal via crafted use of ..* in…

Priority LOW 25

Lei Feng TV CMS (aka LFCMS) 3.8.6 allows Directory Traversal via crafted use of ..* in Template/edit/path URIs, as demonstrated by the admin.php?s=/Template/edit/path/*web*..*..*..*..*1.txt.html URI to read the 1.txt fil…

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.01369 Published 2018-12-30 No fix listed CWE-22