Feifeicms: >> Feifeicms >> 4.1.190209 Security Vulnerabilities
A Cross site request forgery (CSRF) vulnerability was discovered in FeiFeiCMS v4.1.190209, which allows attackers to create administrator accounts via /index.php?s=Admin-Admin-Insert.
CVSS Score
8.8
EPSS Score
0.001
Published
2023-06-27
FeiFeiCMS 4.1.190209 allows remote attackers to upload and execute arbitrary PHP code by visiting index.php?s=Admin-Index to modify the set of allowable file extensions, as demonstrated by adding php to the default jpg,gif,png,jpeg setting, and then using the "add article" feature.
CVSS Score
9.8
EPSS Score
0.007
Published
2019-03-14