| Package | Affected versions | Patched versions |
|---|---|---|
| feifeicms | = 4.1.190209 |
FeiFeiCMS 4.1.190209 allows remote attackers to upload and execute arbitrary PHP code by visiting index.php?s=Admin-Index to modify the set of allowable file extensions, as demonstrated by adding php to the default jpg,gif,png,jpeg setting, and then using the "add article" feature.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free