Fengoffice vulnerabilities
7 published CVEs name Fengoffice among the affected products.
- 7Published CVEs7 of them scored
- 5Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-124500
Fengoffice Feng Office File FilesController.class.php upload_document_image server-side request forgery
Fengoffice · Feng Office
Medium5.3 - CVE-2026-124499
Fengoffice Feng Office Translation Tool ToolController.class.php write_translations code injection
Fengoffice · Feng Office
Medium5.1 - CVE-2026-90497
Fengoffice Feng Office Task Title Output add_task.php getTitle cross site scripting
Fengoffice · Feng Office
Medium5.1 - CVE-2026-90496
Fengoffice Feng Office Reorder Handlers MoreController.class.php update_dimension_order sql injection
Fengoffice · Feng Office
Medium5.1 - CVE-2026-90495
Fengoffice Feng Office Legacy API CompanyWebsite.class.php instance->findAll sql injection
Fengoffice · Feng Office
Medium6.9 - CVE-2025-5877
Fengoffice Feng Office Document Upload ApplicationDataObject.class.php xml external entity reference
Fengoffice · Feng Office
Medium5.3 - CVE-2025-5433
Fengoffice Feng Office index.php sql injection
Fengoffice · Feng Office
Medium5.3