07FlyCRM vulnerabilities
We track 4 vulnerabilities in 07FlyCRM products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 19, 2025.
Latest 07FlyCRM vulnerabilities
- 7.3 High severity
07FLYCMS: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831. This issue affects some unknown processing of the file /index.php/Login/login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate t
- 7.2 High severity
07FLYCMS: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as critical was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.0. This vulnerability affects the function pictureUpload of the file /admin/File/pictureUpload. The manipulation of the argument file leads to unrestricted upload. T
- 7.2 High severity
07FLYCMS: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as critical has been found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.0. This affects the function fileUpload of the file /admin/File/fileUpload. The manipulation of the argument file leads to unrestricted upload. It is possible t
- 7.2 High severity
07FLYCMS: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM 1.3.8. It has been declared as critical. Affected by this vulnerability is the function uploadFile of the file /admin/SysModule/upload/ajaxmodel/upload/uploadfilepath/sysmodule_1 of the component Mo