Login Request a demo
CM
Product
CMS
by dingfanzu · last CVE Feb 21, 2025
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 3High 0Medium 5Low 0
Severity
All severities8Critical3High0Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add CMS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-1544
6.3
0%
Feb 21
dingfanzu CMS loadShopInfo.php sql injection
Affected: 20250210
CVE-2024-9294
6.3
0%
Sep 27
dingfanzu CMS saveNewPwd.php sql injection
Affected: 29d67d9044f6f93378e6eb6ff92272217ff7225c
CVE-2024-46485
6.3
0%
Sep 25
dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/doAdminAction.php?act=addCate
Affected: 1.0
CVE-2024-8303
6.3
0%
Aug 29
dingfanzu CMS getBasicInfo.php sql injection
Affected: 29d67d9044f6f93378e6eb6ff92272217ff7225c
CVE-2024-48758
6.1
0%
Oct 16
dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the addPro parameter of the component doAdminAction.php which allows a remote attacker to…
Affected: 1.0
Showing 5