GE
Vendor
Geeeeeeeek
5
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-48341 | DI Dingfanzu Geeeeeeeek | 3.7 | Sep 8 | dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=addShop |
| CVE-2025-28100 | DI Dingfanzu Geeeeeeeek | 9.8 | Apr 15 | A SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a attacker to execute arbitrary code via not filtering the content correctly at the "operateOrder.php" id parameter |
| CVE-2024-50651 | JS Java Shop Geeeeeeeek | 6.5 | Nov 15 | java_shop 1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by modifying the ID parameter |
| CVE-2024-50652 | JS Java Shop Geeeeeeeek | 4.3 | Nov 15 | A file upload vulnerability in java_shop 1.0 allows attackers to upload arbitrary files by modifying the avatar function |
| CVE-2024-8302 | DI Dingfanzu Geeeeeeeek | 9.8 | Aug 29 | dingfanzu CMS chpwd.php sql injection |
