Login Request a demo
DI
Product
Dingfanzu
by Geeeeeeeek · last CVE Sep 8, 2025
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 2High 0Medium 0Low 1
Severity
All severities3Critical2High0Medium0Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Dingfanzu to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-28100
9.8
1%
Apr 15
A SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a attacker to execute arbitrary code via not filtering the content correctly at the "operateOrder.php" id parameter
Affected: 1.0
CVE-2024-8302
9.8
1%
Aug 29
dingfanzu CMS chpwd.php sql injection
Affected: through 2024-01-31
CVE-2024-48341
3.7
0%
Sep 8
dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=addShop
Affected: 1.0
Showing 3