Skip to content
OpenAdvisories
Critical · 9.8 CVE-2020-21489 EUVD-2023-1716GHSA-6vf2-mfmr-qqqw

Liufee CMS File Upload vulnerability

Published Jun 20, 2023 · Updated Dec 9, 2024 · Assigned by mitre

Description

File Upload vulnerability in Feehicms v.2.0.8 allows a remote attacker to execute arbitrary code via the /admin/index.php?r=admin-user%2Fupdate-self component.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist feehi/cms < 2.0.8.1 2.0.8.1 GHSA-6vf2-mfmr-qqqw

References