Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Lfdycms Clear all filters
TI-2018-14625 CVE-2018-20604 · GHSA-vq7x-jpfh-39f4

Lei Feng TV CMS (aka LFCMS) 3.8.6 allows Directory Traversal via crafted use of ..* in…

Priority LOW 25

Lei Feng TV CMS (aka LFCMS) 3.8.6 allows Directory Traversal via crafted use of ..* in Template/edit/path URIs, as demonstrated by the admin.php?s=/Template/edit/path/*web*..*..*..*..*1.txt.html URI to read the 1.txt fil…

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.01369 Published 2018-12-30 No fix listed CWE-22
TI-2018-09047 CVE-2018-12603 · GHSA-3hrj-frfj-gwp3

Cross-site request forgery (CSRF) vulnerability in admin.php in LFCMS 3.7.0 allows remote…

Priority MEDIUM 44

Cross-site request forgery (CSRF) vulnerability in admin.php in LFCMS 3.7.0 allows remote attackers to hijack the authentication of unspecified users for requests that add administrator users via the s parameter, a relat…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.03419 Published 2018-06-25 No fix listed CWE-352