Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: dingfanzu Clear all filters
TI-2025-01330 CVE-2025-1544 · GHSA-rqxq-4234-gv49

dingfanzu CMS loadShopInfo.php sql injection

Priority LOW 24

A vulnerability, which was classified as critical, was found in dingfanzu CMS up to 20250210.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00311 Published 2025-02-21 No fix listed CWE-74
TI-2024-08627 CVE-2024-9294 · GHSA-xhvg-75gp-pqfj

dingfanzu CMS saveNewPwd.php sql injection

Priority MEDIUM 57

A vulnerability, which was classified as critical, has been found in dingfanzu CMS up to 29d67d9044f6f93378e6eb6ff92272217ff7225c.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00324 Published 2024-09-27 No fix listed CWE-89
TI-2024-07698 CVE-2024-8303 · GHSA-p7q6-fc7h-j55q

dingfanzu CMS getBasicInfo.php sql injection

Priority MEDIUM 57

A vulnerability classified as critical has been found in dingfanzu CMS up to 29d67d9044f6f93378e6eb6ff92272217ff7225c.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.004 Published 2024-08-29 No fix listed CWE-89