Vulnerabilities

TI-2025-00407 CVE-2025-0490 · GHSA-ggw4-86v7-f9rj

Fanli2012 native-php-cms article_dodel.php sql injection

MEDIUM 57

A vulnerability, which was classified as critical, has been found in Fanli2012 native-php-cms 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00606 Published 2025-01-15 No fix listed CWE-74

TI-2025-00406 CVE-2025-0489 · GHSA-mhfw-hq7r-h794

MEDIUM 57

A vulnerability classified as critical was found in Fanli2012 native-php-cms 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00474 Published 2025-01-15 No fix listed CWE-74

TI-2025-00405 CVE-2025-0488 · GHSA-r2fr-78p9-w3pq

MEDIUM 57

A vulnerability classified as critical has been found in Fanli2012 native-php-cms 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00474 Published 2025-01-15 No fix listed CWE-74

TI-2025-00400 CVE-2025-0483 · GHSA-8v2j-g4fg-rvqc

LOW 24

A vulnerability has been found in Fanli2012 native-php-cms 1.0 and classified as problematic.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0034 Published 2025-01-15 No fix listed CWE-79

TI-2025-00399 CVE-2025-0482 · GHSA-p8qr-ww3f-6mvm

HIGH 70

A vulnerability, which was classified as critical, was found in Fanli2012 native-php-cms 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00657 Published 2025-01-15 No fix listed CWE-1392

TI-2021-14781 CVE-2021-36503 · GHSA-53w3-ppjp-j9r6

MEDIUM 50

SQL injection vulnerability in native-php-cms 1.0 allows remote attackers to run arbitrary SQL commands via the cat parameter to /list.php file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00855 Published 2023-02-03 No fix listed CWE-89