Approved changes feed: RSS · Atom
cpe:2.3:a:feehi:feehicms:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Feehi (d2f8f505-989f-5815-91cc-7908ebab1568) |
|---|---|
| Product | Feehicms (19e6cdf5-cb5c-5635-944e-6b4426fd3a24) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/liufee/cms |
purl2cpe | 2026-06-01 10:12:35.596484 |
pkg:github/liufee/cms |
purl2cpe | 2026-06-01 10:12:35.596487 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-15264 |
vulnerable | 2026-06-08 07:06:35.963986 |
FeehiCMS TimThumb timthumb.php server-side request forgery
HIGH (7.3)
A vulnerability was determined in FeehiCMS up to 2.1.1. Impacted is an unknown function of the file frontend/web/timthumb.php of the component TimThumb. Executing manipulation of the argument src can lead to server-side request forgery. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-12-30T19:02:05.997Z
Updated: 2025-12-30T19:19:34.871Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8296 |
vulnerable | 2026-06-08 07:00:24.106188 |
FeehiCMS index.php insert unrestricted upload
MEDIUM (6.3)
A vulnerability was found in FeehiCMS up to 2.1.1 and classified as critical. This issue affects the function insert of the file /admin/index.php?r=user%2Fcreate. The manipulation of the argument User[avatar] leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-08-29T12:31:09.543Z
Updated: 2024-08-29T13:26:01.176Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8295 |
vulnerable | 2026-06-08 07:00:24.103483 |
FeehiCMS index.php createBanner unrestricted upload
MEDIUM (6.3)
A vulnerability has been found in FeehiCMS up to 2.1.1 and classified as critical. This vulnerability affects the function createBanner of the file /admin/index.php?r=banner%2Fbanner-create. The manipulation of the argument BannerForm[img] leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-08-29T12:00:12.891Z
Updated: 2024-08-29T13:34:45.590Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8294 |
vulnerable | 2026-06-08 07:00:24.101050 |
FeehiCMS index.php update unrestricted upload
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in FeehiCMS up to 2.1.1. This affects the function update of the file /admin/index.php?r=friendly-link%2Fupdate. The manipulation of the argument FriendlyLink[image] leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-08-29T11:00:22.696Z
Updated: 2024-08-29T13:36:22.826Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36573 |
vulnerable | 2026-06-08 05:32:52.283592 |
Details available
File Upload vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via crafted image upload.
Published: 2022-12-15T00:00:00.000Z
Updated: 2025-04-21T18:46:05.325Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36572 |
vulnerable | 2026-06-08 05:32:52.283032 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-21322 |
vulnerable | 2026-06-08 05:22:30.774644 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.