Known Vulnerabilities for products from Lfdycms
Listed below are 5 of the newest known vulnerabilities associated with the vendor "Lfdycms".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2018-20604 json | Lei Feng TV CMS (aka LFCMS) 3.8.6 allows Directory Traversal via crafted use of ..* in Template/edit/path URIs, as demonstrat... | 4.9 - MEDIUM | 2018-12-30 | 2019-01-10 |
| CVE-2018-20603 json | Lei Feng TV CMS (aka LFCMS) 3.8.6 allows admin.php?s=/Member/add.html CSRF. | 8.8 - HIGH | 2018-12-30 | 2019-01-10 |
| CVE-2018-20602 json | Lei Feng TV CMS (aka LFCMS) 3.8.6 allows full path disclosure via the /install.php?s=/1 URI. | 7.5 - HIGH | 2018-12-30 | 2019-01-10 |
| CVE-2018-12603 json | Cross-site request forgery (CSRF) vulnerability in admin.php in LFCMS 3.7.0 allows remote attackers to hijack the authenticat... | 8.8 - HIGH | 2018-06-25 | 2018-08-27 |
| CVE-2018-12602 json | A CSRF vulnerability exists in LFCMS 3.7.0: users can be added arbitrarily. | 8.8 - HIGH | 2018-06-25 | 2018-08-27 |
Known software with vulnerabilities from Lfdycms
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Lfdycms | Lfcms | 3.7.0 |