07fly-cms vulnerabilities

2 known vulnerabilities in 07fly-cms from Zero Takeoff. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  07FLYCMS: Unrestricted Upload of File with Dangerous Type

  CVE-2024-9904Oct 13, 202407FLYCMS

  A vulnerability classified as critical was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.0. This vulnerability affects the function pictureUpload of the file /admin/File/pictureUpload. The manipulation of the argument file leads to unrestricted upload. T

• 7.2 High severity

  07FLYCMS: Unrestricted Upload of File with Dangerous Type

  CVE-2024-9903Oct 12, 202407FLYCMS

  A vulnerability classified as critical has been found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.0. This affects the function fileUpload of the file /admin/File/fileUpload. The manipulation of the argument file leads to unrestricted upload. It is possible t