Geeeeeeeek

5 CVEs across 2 Geeeeeeeek products. Browse Geeeeeeeek vulnerabilities, severities, and proof-of-concept exploits.

Geeeeeeeek products with known CVEs

ProductCVEs
Dingfanzu3
Java Shop2
Geeeeeeeek CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-48341Low3.72025-09-08dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=addShop
CVE-2025-28100Critical9.82025-04-15A SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a attacker to execute arbitrary code via not filtering the content correctly at the "operateOrder.ph…
CVE-2024-50652Medium4.32024-11-15A file upload vulnerability in java_shop 1.0 allows attackers to upload arbitrary files by modifying the avatar function.
CVE-2024-50651Medium6.52024-11-15java_shop 1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by modifying the ID…
CVE-2024-8302Medium6.32024-08-29A vulnerability was found in dingfanzu CMS up to 29d67d9044f6f93378e6eb6ff92272217ff7225c. It has been rated as critical. Affected by this issue is some unknow…