Vulnerabilities (CVE)

Filtered by vendor Fuwushe Subscribe
Filtered by product Ifair
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-22523 1 Fuwushe 1 Ifair 2024-11-21 N/A 7.5 HIGH
Directory Traversal vulnerability in Qiyu iFair version 23.8_ad0 and before, allows remote attackers to obtain sensitive information via uploadimage component.
CVE-2023-47473 1 Fuwushe 1 Ifair 2024-11-21 N/A 7.5 HIGH
Directory Traversal vulnerability in fuwushe.org iFair versions 23.8_ad0 and before allows an attacker to obtain sensitive information via a crafted script.