07fly

Top products

The 14 most recently published vulnerabilities affecting 07fly.

• CVE-2025-707807FLYCMS/07FLY-CMS/07FlyCRM cross-site request forgery4.3Jul 6, 2025
• CVE-2025-25379Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to execute arbitrary code via the id parameter of the del.html component.9.6Feb 28, 2025
• CVE-2024-5761107FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/doAdminAction.php?act=editShop&shopId.3.5Jan 16, 2025
• CVE-2024-5716107FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/edit.html4.3Jan 16, 2025
• CVE-2024-5716007FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaTask/edit.html.4.3Jan 16, 2025
• CVE-2024-5715907FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/add.html.3.5Jan 16, 2025
• CVE-2024-5115607FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component 'erp.07fly.net:80/admin/SysNotifyUser/del.html?id=93'.4.7Nov 14, 2024
• CVE-2024-5115707FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component http://erp.07fly.net:80/oa/OaSchedule/add.html.4.7Nov 8, 2024
• CVE-2024-990407FLYCMS/07FLY-CMS/07FlyCRM pictureUpload unrestricted upload4.7Oct 13, 2024
• CVE-2024-990307FLYCMS/07FLY-CMS/07FlyCRM fileUpload unrestricted upload4.7Oct 12, 2024
• CVE-2024-985607FLYCMS/07FLY-CMS/07FlyCRM System Settings Page cross site scripting2.4Oct 11, 2024
• CVE-2024-985507FLYCMS/07FLY-CMS/07FlyCRM Module Plug-In sysmodule_1 uploadFile unrestricted upload4.7Oct 11, 2024
• CVE-2023-502007FLY CRM Administrator Login Page sql injection7.3Sep 17, 2023
• CVE-2023-305807FLY CRM User Profile cross site scripting3.5Jun 2, 2023