CVE ID	Description	Severity	EPSS	Published
CVE-2025-7078	07FLYCMS/07FLY-CMS/07FlyCRM cross-site request forgery	MEDIUM	0.31%	Jul 6, 2025
CVE-2025-25379	Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to execute arbitrary code via the id parameter of the del.html component.	CRITICAL	0.30%	Feb 28, 2025
CVE-2024-57611	07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/doAdminAction.php?act=editShop&shopId.	LOW	0.15%	Jan 16, 2025
CVE-2024-57159	07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/add.html.	LOW	0.15%	Jan 16, 2025
CVE-2024-51156	07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component 'erp.07fly.net:80/admin/SysNotifyUser/del.html?id=93'.	MEDIUM	0.20%	Nov 14, 2024
CVE-2024-51157	07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component http://erp.07fly.net:80/oa/OaSchedule/add.html.	MEDIUM	0.18%	Nov 8, 2024
CVE-2024-9904	07FLYCMS/07FLY-CMS/07FlyCRM pictureUpload unrestricted upload	MEDIUM	0.63%	Oct 13, 2024
CVE-2024-9903	07FLYCMS/07FLY-CMS/07FlyCRM fileUpload unrestricted upload	MEDIUM	0.63%	Oct 12, 2024
CVE-2024-9856	07FLYCMS/07FLY-CMS/07FlyCRM System Settings Page cross site scripting	MEDIUM	0.42%	Oct 11, 2024
CVE-2024-9855	07FLYCMS/07FLY-CMS/07FlyCRM Module Plug-In sysmodule_1 uploadFile unrestricted upload	MEDIUM	0.63%	Oct 11, 2024

Rows per page

Showing 1 to 10 of 10 CVEs