Vendor/product archive

fangfa / fdcms CVEs

Beta · best-effort

3 CVEs tagged to fangfa / fdcms — 2 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to fangfa vendor archive

CVE-2020-35442

Published Jun 2, 2021

FDCMS (also known as Fangfa Content Management System) 4.0 allows remote attackers to get a webshell in the background via Front/lib/Action/FindexAction.class.php.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2020-35441

Published Jun 2, 2021

FDCMS (aka Fangfa Content Management System) 4.0 contains a front-end SQL injection via Admin/Lib/Action/FloginAction.class.php.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2018-17048

Published May 16, 2019

admin/Lib/Action/FpluginAction.class.php in FDCMS (aka Fangfa Content Manage System) 4.2 allows SQL Injection.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1