Baowzh vulnerabilities
We track 3 vulnerabilities in Baowzh products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 11, 2025.
Latest Baowzh vulnerabilities
- 9.8 Critical severity
hfly: Unrestricted Upload of File with Dangerous Type
A vulnerability was detected in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c. The impacted element is an unknown function of the file /Public/Kindeditor/php/upload_json.php. Performing manipulation of the argument imgFile results in unrestricted
- 7.5 High severity
hfly: Improper Limitation of a Pathname to a Restricted Directory
A security vulnerability has been detected in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c. The affected element is an unknown function of the file /admin/index.php/datafile/download. Such manipulation of the argument filename leads to path trave
- 9.1 Critical severity
hfly: Improper Limitation of a Pathname to a Restricted Directory
A weakness has been identified in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c. Impacted is an unknown function of the file /admin/index.php/datafile/delfile. This manipulation of the argument filename causes path traversal. The attack is possibl