Vulnerabilities (CVE)

Filtered by vendor 07fly Subscribe
Filtered by product 07flycms
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-25379 1 07fly 1 07flycms 2025-04-15 N/A 9.6 CRITICAL
Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to execute arbitrary code via the id parameter of the del.html component.
CVE-2024-57611 1 07fly 1 07flycms 2025-04-15 N/A 3.5 LOW
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/doAdminAction.php?act=editShop&shopId.
CVE-2024-57159 1 07fly 1 07flycms 2025-04-15 N/A 3.5 LOW
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/add.html.