CNNVD-202512-5090 Information

CNNVD ID

CNNVD-202512-5090

CVE-2025-15264

  • CNNVD Published: 2025-12-30

Description (Chinese)

FeehiCMS是Liufee个人开发者的一个基于Php的CMS建站系统。 FeehiCMS 2.1.1及之前版本存在代码问题漏洞,该漏洞源于对文件frontend/web/timthumb.php中参数src的错误操作,可能导致服务端请求伪造。

Description (English)

FeehiCMS is a Php-based CMS station system of Liufee personal developers. FeehiCMS 2.1.1 and previous versions had a code problem loophole, which stemmed from an error in the use of src for the parameters in file Frontend/web/timthumb.php, which could lead to the forgery of service requests.

Hazard Level

Medium

Vulnerability Type

代码问题

Affected Vendor

个人开发者

Published

2025-12-30

Last Modified

2026-02-24

References

https://vuldb.com/?ctiid.338663 https://vuldb.com/?id.338663 https://vuldb.com/?submit.718278

Share on: