Native-php-cms Project

Native-php-cms

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2025-0489

Exploit
  • EPSS 0.15%
  • Veröffentlicht 15.01.2025 22:15:26
  • Zuletzt bearbeitet 05.05.2025 15:19:28

A vulnerability classified as critical was found in Fanli2012 native-php-cms 1.0. This vulnerability affects unknown code of the file /fladmin/friendlink_dodel.php. The manipulation of the argument id leads to sql injection. The attack can be initiat...

8.8

CVE-2025-0490

Exploit
  • EPSS 0.15%
  • Veröffentlicht 15.01.2025 22:15:26
  • Zuletzt bearbeitet 05.05.2025 15:19:37

A vulnerability, which was classified as critical, has been found in Fanli2012 native-php-cms 1.0. This issue affects some unknown processing of the file /fladmin/article_dodel.php. The manipulation of the argument id leads to sql injection. The atta...

8.8

CVE-2025-0488

Exploit
  • EPSS 0.2%
  • Veröffentlicht 15.01.2025 21:15:15
  • Zuletzt bearbeitet 05.05.2025 15:19:19

A vulnerability classified as critical has been found in Fanli2012 native-php-cms 1.0. This affects an unknown part of the file product_list.php. The manipulation of the argument cat leads to sql injection. It is possible to initiate the attack remot...

4.6

CVE-2025-0483

Exploit
  • EPSS 0.36%
  • Veröffentlicht 15.01.2025 20:15:29
  • Zuletzt bearbeitet 13.05.2025 13:39:54

A vulnerability has been found in Fanli2012 native-php-cms 1.0 and classified as problematic. This vulnerability affects unknown code of the file /fladmin/jump.php. The manipulation of the argument message/error leads to cross site scripting. The att...

7.3

CVE-2025-0482

Exploit
  • EPSS 0.23%
  • Veröffentlicht 15.01.2025 20:15:28
  • Zuletzt bearbeitet 29.04.2025 20:23:05

A vulnerability, which was classified as critical, was found in Fanli2012 native-php-cms 1.0. This affects an unknown part of the file /fladmin/user_recoverpwd.php. The manipulation leads to use of default credentials. It is possible to initiate the ...

9.8

CVE-2021-36503

Exploit
  • EPSS 0.48%
  • Veröffentlicht 03.02.2023 18:15:10
  • Zuletzt bearbeitet 27.03.2025 14:15:17

SQL injection vulnerability in native-php-cms 1.0 allows remote attackers to run arbitrary SQL commands via the cat parameter to /list.php file.