Skip to content
OpenAdvisories

Vendor

Fengoffice

7 known vulnerabilities.

Products

Feng Office 7
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2026-90495

    Fengoffice Feng Office Legacy API CompanyWebsite.class.php instance->findAll sql injection

    A vulnerability has been found in Fengoffice Feng Office up to 3.11.13.11. This impacts the function Contacts::instance->findAll of the file application/models/CompanyWebsite.class.php of the component Legacy API. Such manipulation of the argument auth leads …

    Fengoffice Feng Office