07fly 07flycms

Name: 07fly 07flycms
Brand: 07fly

productUS

cpe:2.3:a:07fly:07flycms:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical3high1medium0low

updated 2026-10-26

vulnerabilities (10)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-9904US	high7.2	0.63% (50th)	—	no fix	2024-10-13	1.0.0 → 1.2.0
CVE-2024-9903US	high7.2	0.63% (50th)	—	no fix	2024-10-12	1.0.0 → 1.2.0
CVE-2024-9855US	high7.2	0.63% (50th)	—	no fix	2024-10-11	= 1.3.8
CVE-2024-9856US	medium4.8	0.42% (36th)	—	no fix	2024-10-11	= 1.3.8
CVE-2025-7078US	—OT elevated	0.31% (23rd)	—	no fix	2025-07-06	≤ 1.3.9
CVE-2025-25379US	—	0.30% (22nd)	—	no fix	2025-02-28	= 1.3.9
CVE-2024-51156US	—	0.21% (11th)	—	no fix	2024-11-14	= 1.3.9
CVE-2024-51157US	—	0.18% (8th)	—	no fix	2024-11-08	= 1.3.9
CVE-2024-57611US	—	0.16% (5th)	—	no fix	2025-01-16	= 1.3.9
CVE-2024-57159US	—	0.16% (5th)	—	no fix	2025-01-16	= 1.3.9

The flaw types (CWEs) most of these CVEs share.

CWE-352Cross-Site Request Forgery (CSRF)6 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs
CWE-862Missing Authorization1 CVEs
CWE-863Incorrect Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.