Skip to content
OpenAdvisories

Package · Packagist

feehi/cms

21 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-21174

    liufee CMS File Upload vulnerability

    File Upload vulenrability in liufee CMS v.2.0.7.1 allows a remote attacker to execute arbitrary code via the image suffix function.

    feehi/cms Packagist
  • Critical 9.8
    CVE-2020-21489

    Liufee CMS File Upload vulnerability

    File Upload vulnerability in Feehicms v.2.0.8 allows a remote attacker to execute arbitrary code via the /admin/index.php?r=admin-user%2Fupdate-self component.

    feehi/cms Packagist
  • Critical 9.8
    CVE-2020-21516

    FeehiCMS has an arbitrary file upload vulnerability

    There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8 at the head image upload, that allows attackers to execute relevant PHP code.

    feehi/cms Packagist
  • Critical 9.1
    CVE-2021-30108

    Server-Side Request Forgery in Feehi CMS

    Feehi CMS 2.1.1 is affected by a Server-side request forgery (SSRF) vulnerability. When the user modifies the HTTP Referer header to any url, the server can make a request to it.

    feehi/cms Packagist