Vendors07FLYcustomer_relationship_managementall versions
Vulnerabilities

07FLY Customer Relationship Management

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs
CVE-2023-5020
07FLY CRM Administrator Login Page sql injection
Published 2023-09-17 · Modified
9.8EPSS 0.008
CVE-2024-9903
07FLYCMS/07FLY-CMS/07FlyCRM fileUpload unrestricted upload
Published 2024-10-12 · Analyzed
7.2EPSS 0.006
CVE-2024-9904
07FLYCMS/07FLY-CMS/07FlyCRM pictureUpload unrestricted upload
Published 2024-10-13 · Analyzed
7.2EPSS 0.006
CVE-2024-9855
07FLYCMS/07FLY-CMS/07FlyCRM Module Plug-In sysmodule_1 uploadFile unrestricted upload
Published 2024-10-11 · Analyzed
7.2EPSS 0.006
CVE-2023-3058
07FLY CRM User Profile cross site scripting
Published 2023-06-02 · Modified
5.4EPSS 0.006
CVE-2024-9856
07FLYCMS/07FLY-CMS/07FlyCRM System Settings Page cross site scripting
Published 2024-10-11 · Analyzed
5.1EPSS 0.004
CVE-2025-7078
07FLYCMS/07FLY-CMS/07FlyCRM cross-site request forgery
Published 2025-07-06 · Analyzed
5.0EPSS 0.003
CVE-2024-57160
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaTask/edit.html.
Published 2025-01-16 · Analyzed
4.3EPSS 0.002
CVE-2024-57161
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/edit.html
Published 2025-01-16 · Analyzed
4.3EPSS 0.002