CVE-2020-22643

Feehi CMS 2.1.0 is affected by an arbitrary file upload vulnerability, potentially resulting in remote code execution. After an administrator logs in, open the administrator image upload page to potentially upload malicious files.

• CWE-434

• https://github.com/liufee/cms/issues/51Exploit, Issue Tracking, Third Party Advisory
• https://github.com/liufee/cms/issues/51Exploit, Issue Tracking, Third Party Advisory

Published

Jan 26, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-22617Ardour v5.12 contains a use-after-free vulnerability in the …9.8
• CVE-2020-2262Jenkins Android Lint Plugin 2.6 and earlier does not escape …5.4
• CVE-2020-22623Directory traversal vulnerability in Jinfornet Jreport 15.6 …7.5
• CVE-2020-22628Buffer Overflow vulnerability in LibRaw::stretch() function …6.5
• CVE-2020-2263Jenkins Radiator View Plugin 1.29 and earlier does not escap…5.4
• CVE-2020-2264Jenkins Custom Job Icon Plugin 0.2 and earlier does not esca…5.4
• CVE-2020-22647An issue found in DepositGame v.1.0 allows an attacker to ga…9.1
• CVE-2020-2265Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and ea…5.4
• CVE-2020-22650A memory leak vulnerability in sim-organizer.c of AlienVault…7.5
• CVE-2020-22653In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Rucku…9.8
• CVE-2020-22654In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Rucku…9.8
• CVE-2020-22655In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Rucku…7.5