CVE-2018-20602: Lfdycms Lei Feng Tv CMS

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Lei Feng TV CMS (aka LFCMS) 3.8.6 allows full path disclosure via the /install.php?s=/1 URI.

Affected products

• Lfdycms Lei Feng Tv CMS: version 3.8.6 only

Published 2018-12-30. Last modified 2026-06-17.