Fengoffice

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 11
    Known Exploited: 0
    2
    Critical Level Threats
    1
    High Level Threats
    7
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-90497

    Fengoffice Feng Office Task Title Output add_task.php getTitle cross site scripting

    Last Modified: Sep 14, 2026
    Published: Sep 13, 2026

    CVE-2026-90496

    Fengoffice Feng Office Reorder Handlers MoreController.class.php update_dimension_order sql injection

    Last Modified: Sep 16, 2026
    Published: Sep 13, 2026

    CVE-2026-90495

    Fengoffice Feng Office Legacy API CompanyWebsite.class.php instance->findAll sql injection

    Last Modified: Sep 14, 2026
    Published: Sep 13, 2026

    CVE-2026-36669

    An unauthenticated arbitrary file upload vulnerability in ck_upload_handler.php in Feng Office 3.11.13.11 allows remote attackers to upload malicious files (such as .html) to the web-accessible /tmp/ directory.

    Last Modified: Aug 01, 2026
    Published: Jul 17, 2026

    CVE-2025-5877

    Fengoffice Feng Office Document Upload ApplicationDataObject.class.php xml external entity reference

    Last Modified: Jul 02, 2025
    Published: Jun 09, 2025
    Items Per Page
    Fengoffice Vulnerabilities & Security CVEs | CVE-DB