Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:feehicms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductFeehicms (600f89a1-a40f-5ceb-b36b-50d74f575d66)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-15264 vulnerable 2026-06-08 07:06:35.963206 FeehiCMS TimThumb timthumb.php server-side request forgery
HIGH (7.3)
A vulnerability was determined in FeehiCMS up to 2.1.1. Impacted is an unknown function of the file frontend/web/timthumb.php of the component TimThumb. Executing manipulation of the argument src can lead to server-side request forgery. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-12-30T19:02:05.997Z
Updated: 2025-12-30T19:19:34.871Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8296 vulnerable 2026-06-08 07:00:24.106270 FeehiCMS index.php insert unrestricted upload
MEDIUM (6.3)
A vulnerability was found in FeehiCMS up to 2.1.1 and classified as critical. This issue affects the function insert of the file /admin/index.php?r=user%2Fcreate. The manipulation of the argument User[avatar] leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-08-29T12:31:09.543Z
Updated: 2024-08-29T13:26:01.176Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8295 vulnerable 2026-06-08 07:00:24.103546 FeehiCMS index.php createBanner unrestricted upload
MEDIUM (6.3)
A vulnerability has been found in FeehiCMS up to 2.1.1 and classified as critical. This vulnerability affects the function createBanner of the file /admin/index.php?r=banner%2Fbanner-create. The manipulation of the argument BannerForm[img] leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-08-29T12:00:12.891Z
Updated: 2024-08-29T13:34:45.590Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8294 vulnerable 2026-06-08 07:00:24.102735 FeehiCMS index.php update unrestricted upload
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in FeehiCMS up to 2.1.1. This affects the function update of the file /admin/index.php?r=friendly-link%2Fupdate. The manipulation of the argument FriendlyLink[image] leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-08-29T11:00:22.696Z
Updated: 2024-08-29T13:36:22.826Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.