Fengoffice

Feng Office

11 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4

CVE-2026-90497

Exploit
  • EPSS 0.19%
  • Veröffentlicht 13.09.2026 05:45:10
  • Zuletzt bearbeitet 14.09.2026 20:56:48

A vulnerability was determined in Fengoffice Feng Office up to 3.11.13.11. Affected by this vulnerability is the function getTitle of the file application/views/task/add_task.php of the component Task Title Output. Executing a manipulation of the arg...

5.8

CVE-2026-90496

Exploit
  • EPSS 0.2%
  • Veröffentlicht 13.09.2026 05:30:11
  • Zuletzt bearbeitet 16.09.2026 14:17:13

A vulnerability was found in Fengoffice Feng Office up to 3.11.13.11. Affected is the function update_system_module_order/update_dimension_order of the file application/controllers/MoreController.class.php of the component Reorder Handlers. Performin...

7.5

CVE-2026-90495

Exploit
  • EPSS 0.26%
  • Veröffentlicht 13.09.2026 03:30:05
  • Zuletzt bearbeitet 14.09.2026 20:56:48

A vulnerability has been found in Fengoffice Feng Office up to 3.11.13.11. This impacts the function Contacts::instance->findAll of the file application/models/CompanyWebsite.class.php of the component Legacy API. Such manipulation of the argument au...

9.8

CVE-2026-36669

  • EPSS 0.56%
  • Veröffentlicht 17.07.2026 00:00:00
  • Zuletzt bearbeitet 23.07.2026 18:28:20

An unauthenticated arbitrary file upload vulnerability in ck_upload_handler.php in Feng Office 3.11.13.11 allows remote attackers to upload malicious files (such as .html) to the web-accessible /tmp/ directory.

8.1

CVE-2025-5877

Exploit
  • EPSS 0.36%
  • Veröffentlicht 09.06.2025 12:31:04
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A vulnerability, which was classified as problematic, has been found in Fengoffice Feng Office 3.2.2.1. Affected by this issue is some unknown functionality of the file /application/models/ApplicationDataObject.class.php of the component Document Upl...

6.5

CVE-2025-5433

  • EPSS 0.25%
  • Veröffentlicht 02.06.2025 06:31:04
  • Zuletzt bearbeitet 15.04.2026 00:35:42

A vulnerability was found in Fengoffice Feng Office 3.5.1.5 and classified as critical. Affected by this issue is some unknown functionality of the file /index.php?c=account&a=set_timezone. The manipulation of the argument tz_offset leads to sql inje...

8.8

CVE-2024-6039

Exploit
  • EPSS 0.73%
  • Veröffentlicht 16.06.2024 22:15:09
  • Zuletzt bearbeitet 21.11.2024 09:48:48

A vulnerability, which was classified as critical, was found in Feng Office 3.11.1.2. Affected is an unknown function of the component Workspaces. The manipulation of the argument dim leads to sql injection. It is possible to launch the attack remote...

9.8

CVE-2019-9623

Exploit
  • EPSS 8.12%
  • Veröffentlicht 07.03.2019 05:29:01
  • Zuletzt bearbeitet 21.11.2024 04:51:59

Feng Office 3.7.0.5 allows remote attackers to execute arbitrary code via "<!--#exec cmd=" in a .shtml file to ck_upload_handler.php.

4.3

CVE-2014-5343

  • EPSS 1.92%
  • Veröffentlicht 19.08.2014 18:55:03
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Cross-site scripting (XSS) vulnerability in Feng Office allows remote attackers to inject arbitrary web script or HTML via a client Name field.

4.3

CVE-2013-5744

Exploit
  • EPSS 0.96%
  • Veröffentlicht 28.10.2013 22:55:03
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Cross-site scripting (XSS) vulnerability in Feng Office 2.3.2-rc and earlier allows remote attackers to inject arbitrary web script or HTML via an arbitrary ref_XXX parameter.