What’s Vulnerable › Products
Fengoffice Feng Office vulnerabilities
10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.
Check whether your Fengoffice Feng Office version is affected
Latest Fengoffice Feng Office vulnerabilities
- CVE-2026-90497 — Fengoffice Feng Office Task Title Output add_task.php getTitle cross site scripting (CVSS 3.5)
- CVE-2026-90496 — Fengoffice Feng Office Reorder Handlers MoreController.class.php update_dimension_order sql injection (CVSS 4.7)
- CVE-2026-90495 — Fengoffice Feng Office Legacy API CompanyWebsite.class.php instance->findAll sql injection (CVSS 7.3)
- CVE-2025-5877 — Fengoffice Feng Office Document Upload ApplicationDataObject.class.php xml external entity reference (CVSS 8.1)
- CVE-2025-5433 — Fengoffice Feng Office index.php sql injection (CVSS 6.3)
- CVE-2024-6039 — Feng Office Workspaces sql injection (CVSS 8.8)
- CVE-2019-9623 — (CVSS 9.8)
- CVE-2014-5343 — (CVSS 4.3)
- CVE-2013-5744 — (CVSS 4.3)
- CVE-2011-3738 — (CVSS 5.0)