Kuaifancms

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-3256 MEDIUM POC This Month

KuaiFanCMS V5.x contains an arbitrary file read vulnerability in the html_url parameter of the chakanhtml.module.php file. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Information Disclosure Kuaifancms

NVD GitHub

CVSS 3.1

6.5

EPSS

0.9%

CVE-2019-14746 CRITICAL POC Act Now

A issue was discovered in KuaiFanCMS 5.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Code Injection PHP RCE Kuaifancms

NVD GitHub

CVSS 3.0

9.8

EPSS

1.2%

CVE-2021-3256

EPSS 1% CVSS 6.5

MEDIUM POC This Month

PHP Information Disclosure Kuaifancms

NVD GitHub

CVE-2019-14746

EPSS 1% CVSS 9.8

CRITICAL POC Act Now

Code Injection PHP RCE +1

NVD GitHub