Lfdycms Lei Feng Tv Cms — known CVE vulnerabilities

Every CVE whose affected-product data names Lfdycms Lei Feng Tv Cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2018-20603 — CVSS 8.8 (high): Lei Feng TV CMS (aka LFCMS) 3.8.6 allows admin.php?s=/Member/add.html CSRF.
• CVE-2018-20602 — CVSS 7.5 (high): Lei Feng TV CMS (aka LFCMS) 3.8.6 allows full path disclosure via the /install.php?s=/1 URI.
• CVE-2018-20604 — CVSS 4.9 (medium): Lei Feng TV CMS (aka LFCMS) 3.8.6 allows Directory Traversal via crafted use of ..* in Template/edit/path URIs, as demonstrated by the…