feelcrm-os vulnerabilities
CVEs whose affected-version data names the feelcrm-os package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
7 CVEsRSS
CVE-2026-105389Medium· 6.3PoCA security vulnerability has been detected in feelec-yishu feelcrm-os 1.0.0
A security vulnerability has been detected in feelec-yishu feelcrm-os 1.0.0. This issue affects some unknown processing of the file App/Feelcrm/Crm/Controller/UploadController.class.php of the component UploadTicketFile Endpoint. Such ma…
CVE-2026-105388Medium· 6.3PoCA weakness has been identified in feelec-yishu feelcrm-os 1.0.0
A weakness has been identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function index of the file App/Feelcrm/Index/Controller/MemberController.class.php of the component Member Endpoint. This manipulation of the…
CVE-2026-105291Medium· 4.3PoCA vulnerability was identified in feelec-yishu feelcrm-os 1.0.0
A vulnerability was identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function GroupController::index of the file App/Feelcrm/Index/Controller/GroupController.class.php of the component Department Search Endpoin…
CVE-2026-105290High· 7.3PoCA vulnerability was determined in feelec-yishu feelcrm-os 1.0.0
A vulnerability was determined in feelec-yishu feelcrm-os 1.0.0. This affects an unknown part of the file App/Feelcrm/Index/Controller/GoogleController.class.php of the component getCurlData Endpoint. Executing a manipulation of the argu…
CVE-2026-105289Low· 3.5PoCA vulnerability was found in feelec-yishu feelcrm-os 1.0.0
A vulnerability was found in feelec-yishu feelcrm-os 1.0.0. Affected by this issue is the function htmlspecialchars_decode of the file App/Feelcrm/Common/Model/CrmDefineFormModel.class.php of the component Create Customer Endpoint. Perfo…
CVE-2026-105288Medium· 4.3PoCA vulnerability has been found in feelec-yishu feelcrm-os 1.0.0
A vulnerability has been found in feelec-yishu feelcrm-os 1.0.0. Affected by this vulnerability is the function IndexController::index of the file App/ThinkPHP/Common/functions.php of the component Crm Endpoint. Such manipulation of the …
CVE-2026-105287Medium· 6.3PoCA flaw has been found in feelec-yishu feelcrm-os 1.0.0
A flaw has been found in feelec-yishu feelcrm-os 1.0.0. Affected is an unknown function of the file App/Feelcrm/Crm/Controller/AjaxRequestController.class.php of the component getMemberByGroups Endpoint. This manipulation of the argument…