TI-2025-06440 CVE-2025-7078 · GHSA-7g5c-2436-6692
07FLYCMS/07FLY-CMS/07FlyCRM cross-site request forgery
Priority MEDIUM 57
A vulnerability classified as problematic was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.3.9.
Vulnerabilities
14 records
TI-2025-18988 CVE-2025-25379 · GHSA-vqx8-mvcx-mx39
Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to…
Priority HIGH 76
Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to execute arbitrary code via the id parameter of the del.html component.
TI-2024-37964 CVE-2024-57611 · GHSA-pv2j-88c7-fj84
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via…
Priority MEDIUM 50
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/doAdminAction.php?act=editShop&shopId.
TI-2024-37807 CVE-2024-57161 · GHSA-26h2-xpj3-3r9v
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via…
Priority MEDIUM 53
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/edit.html
TI-2024-37806 CVE-2024-57160 · GHSA-vc42-8hvr-72r6
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaTask/edit.html.
Priority MEDIUM 53
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaTask/edit.html.
TI-2024-37805 CVE-2024-57159 · GHSA-fw54-qxpm-m379
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via…
Priority MEDIUM 50
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/add.html.
TI-2024-34263 CVE-2024-51156 · GHSA-j8fq-9f7x-5883
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…
Priority LOW 21
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component 'erp.07fly.net:80/admin/SysNotifyUser/del.html?id=93'.
TI-2024-34264 CVE-2024-51157 · GHSA-mgmf-6j2f-mh6r
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…
Priority MEDIUM 55
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component http://erp.07fly.net:80/oa/OaSchedule/add.html.
TI-2024-09188 CVE-2024-9904 · GHSA-v8p3-f3p7-66xj
07FLYCMS/07FLY-CMS/07FlyCRM pictureUpload unrestricted upload
Priority MEDIUM 56
A vulnerability classified as critical was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.0.
TI-2024-09187 CVE-2024-9903 · GHSA-mq8p-chwh-jrj5
07FLYCMS/07FLY-CMS/07FlyCRM fileUpload unrestricted upload
Priority MEDIUM 56
A vulnerability classified as critical has been found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.0.
TI-2024-09146 CVE-2024-9856 · GHSA-pj3m-fgm6-v75m
07FLYCMS/07FLY-CMS/07FlyCRM System Settings Page cross site scripting
Priority MEDIUM 56
A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM 1.3.8.
TI-2024-09145 CVE-2024-9855 · GHSA-7hcw-752h-p5pp
07FLYCMS/07FLY-CMS/07FlyCRM Module Plug-In sysmodule_1 uploadFile unrestricted upload
Priority MEDIUM 56
A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM 1.3.8.
TI-2023-04622 CVE-2023-5020 · GHSA-q6jm-c3w4-43r4
07FLY CRM Administrator Login Page sql injection
Priority MEDIUM 44
A vulnerability, which was classified as critical, has been found in 07FLY CRM V2.
TI-2023-02864 CVE-2023-3058 · GHSA-4jgq-px27-8954
07FLY CRM User Profile cross site scripting
Priority MEDIUM 58
A vulnerability was found in 07FLY CRM up to 1.2.0.