07FLY vulnerabilities
We track 5 vulnerabilities in 07FLY products across 4 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on February 28, 2025.
Latest 07FLY vulnerabilities
- 9.6 Critical severity
07flycms: Cross-Site Request Forgery
Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to execute arbitrary code via the id parameter of the del.html component.
- 7.2 High severity
07FLYCMS: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as critical was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.0. This vulnerability affects the function pictureUpload of the file /admin/File/pictureUpload. The manipulation of the argument file leads to unrestricted upload. T
- 7.2 High severity
07FLYCMS: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as critical has been found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.0. This affects the function fileUpload of the file /admin/File/fileUpload. The manipulation of the argument file leads to unrestricted upload. It is possible t
- 7.2 High severity
07FLYCMS: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM 1.3.8. It has been declared as critical. Affected by this vulnerability is the function uploadFile of the file /admin/SysModule/upload/ajaxmodel/upload/uploadfilepath/sysmodule_1 of the component Mo
- 9.8 Critical severity
CRM: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in 07FLY CRM V2. This issue affects some unknown processing of the file /index.php/sysmanage/Login/login_auth/ of the component Administrator Login Page. The manipulation of the argument account