07FLYCMS up to 1.2.0 Unrestricted File Upload Vulnerability

Key Information Vulnerability Description Name: 07FLYCMS/07FLY-CMS/07FLYCRM UP TO 1.2.0 PICTUREUPLOAD FILE UNRESTRICTED UPLOAD CVSS Meta Temp Score: 4.5 Current Exploit Price: $0-$5k CTI Interest Score: 2.61 Vulnerability Impact Affected Products: 07FLYCMS, 07FLY-CMS, 07FLYCRM up to 1.2.0 Description: The vulnerability exists in the file , allowing arbitrary file uploads via the file upload functionality. CWE Definition: CWE-434 Impact: Enables uploading or transferring files of dangerous types, which may be automatically processed within the product environment. Exploit Details Exploit Method: Attack via uploading malicious files. Exploit Difficulty: Easy to exploit. Exploit Type: Remote exploitation. Technical Details: Publicly available. Public Exploit: Known. MITRE ATT&CK: T1608.002 Scope of Impact Affected Products: 07FLYCMS, 07FLY-CMS, 07FLYCRM Public Exploit: Known. Vendor Contact: Vendor cannot be contacted. Exploit Tools Exploit Tools: Available for download from github.com. Exploit Tools: Publicly available. Remediation Recommendations Recommendation: Use alternative products. Related Links Similar Vulnerabilities: VDB-274361, VDB-274362, VDB-274363, VDB-275135 Summary This vulnerability allows attackers to upload arbitrary files to affected products, potentially compromising data confidentiality, integrity, and availability. Exploit tools are publicly available; affected users are advised to take immediate action to mitigate the risk.

Goal Reached Thanks to every supporter — we hit 100%!

07FLYCMS up to 1.2.0 Unrestricted File Upload Vulnerability