PatchTheCVE: fdcmshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-35442: FDCMS (also known as Fangfa Content Management System) 4.0 allows remote attackers to get a webshell in the bahttps://patchthecve.com/cve/CVE-2020-35442.htmlhttps://patchthecve.com/cve/CVE-2020-35442.htmlWed, 17 Jun 2026 03:13:43 +0000CRITICAL 9.8: FDCMS (also known as Fangfa Content Management System) 4.0 allows remote attackers to get a webshell in the background via Front/lib/Action/FindexAction.class.php.CVE-2020-35441: FDCMS (aka Fangfa Content Management System) 4.0 contains a front-end SQL injection via Admin/Lib/Action/Flogihttps://patchthecve.com/cve/CVE-2020-35441.htmlhttps://patchthecve.com/cve/CVE-2020-35441.htmlWed, 17 Jun 2026 03:13:43 +0000CRITICAL 9.8: FDCMS (aka Fangfa Content Management System) 4.0 contains a front-end SQL injection via Admin/Lib/Action/FloginAction.class.php.CVE-2018-17048: admin/Lib/Action/FpluginAction.class.php in FDCMS (aka Fangfa Content Manage System) 4.2 allows SQL Injection.https://patchthecve.com/cve/CVE-2018-17048.htmlhttps://patchthecve.com/cve/CVE-2018-17048.htmlWed, 17 Jun 2026 01:45:16 +0000HIGH 7.5: admin/Lib/Action/FpluginAction.class.php in FDCMS (aka Fangfa Content Manage System) 4.2 allows SQL Injection.