Fengoffice vulnerabilities

Products

• Feng Office 6
• Feng Office 6

Newest

• fengoffice feng office Fengoffice Feng Office Task Title Output add_task.php getTitle cross site scripting CVE-2026-90497 5.1 MediumSeptember 13, 2026
• fengoffice feng office Fengoffice Feng Office Reorder Handlers MoreController.class.php update_dimension_order sql injection CVE-2026-90496 5.1 MediumSeptember 13, 2026
• fengoffice feng office Fengoffice Feng Office Legacy API CompanyWebsite.class.php instance->findAll sql injection CVE-2026-90495 6.9 MediumSeptember 13, 2026
• fengoffice feng office Fengoffice Feng Office Document Upload ApplicationDataObject.class.php xml external entity reference CVE-2025-5877 5.3 MediumJune 9, 2025
• fengoffice feng office Fengoffice Feng Office index.php sql injection CVE-2025-5433 5.3 MediumJune 2, 2025
• fengoffice feng office Feng Office Workspaces sql injection CVE-2024-6039 Public exploit 5.3 MediumJune 16, 2024
• fengoffice feng office Feng Office 3.7.0.5 allows remote attackers to execute arbitrary code via "<!--#exec cmd=" in a ... CVE-2019-9623 Public exploit 9.8 CriticalMarch 7, 2019
• fengoffice feng office Cross-site scripting (XSS) vulnerability in Feng Office allows remote attackers to inject... CVE-2014-5343 4.3 MediumAugust 19, 2014
• fengoffice feng office Cross-site scripting (XSS) vulnerability in Feng Office 2.3.2-rc and earlier allows remote... CVE-2013-5744 4.3 MediumOctober 28, 2013
• fengoffice feng office Feng Office 1.7.2 allows remote attackers to obtain sensitive information via a direct request to... CVE-2011-3738 5.0 MediumSeptember 23, 2011