FE
Vendor
Fengoffice
10
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-90497 | FO Feng Office Fengoffice | 3.5 | Sep 13 | Fengoffice Feng Office Task Title Output add_task.php getTitle cross site scripting |
| CVE-2026-90496 | FO Feng Office Fengoffice | 4.7 | Sep 13 | Fengoffice Feng Office Reorder Handlers MoreController.class.php update_dimension_order sql injection |
| CVE-2026-90495 | FO Feng Office Fengoffice | 7.3 | Sep 13 | Fengoffice Feng Office Legacy API CompanyWebsite.class.php instance->findAll sql injection |
| CVE-2025-5877 | FO Feng Office Fengoffice | 8.1 | Jun 9 | Fengoffice Feng Office Document Upload ApplicationDataObject.class.php xml external entity reference |
| CVE-2025-5433 | FO Feng Office Fengoffice | 6.3 | Jun 2 | Fengoffice Feng Office index.php sql injection |
| CVE-2024-6039 | FO Feng Office Fengoffice | 8.8 | Jun 16 | Feng Office Workspaces sql injection |
| CVE-2019-9623 | FO Feng Office Fengoffice | 9.8 | Mar 7 | Feng Office 3.7.0.5 allows remote attackers to execute arbitrary code via "<!--#exec cmd=" in a .shtml file to ck_upload_handler.php |
| CVE-2014-5343 | FO Feng Office Fengoffice | – | Aug 19 | Cross-site scripting (XSS) vulnerability in Feng Office allows remote attackers to inject arbitrary web script or HTML via a client Name field |
| CVE-2013-5744 | FO Feng Office Fengoffice | – | Oct 28 | Cross-site scripting (XSS) vulnerability in Feng Office 2.3.2-rc and earlier allows remote attackers to inject arbitrary web script or HTML via an arbitrary ref_XXX parameter |
| CVE-2011-3738 | FO Feng Office Fengoffice | – | Sep 23 | Feng Office 1.7.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as… |