Cross site request forgery (csrf)

2023-05-0814:15:00

PRIOn knowledge base

www.prio-n.com

flycms 1.0

csrf vulnerability

admin accounts

security

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.3%

Cross Site Request Forgery (CSRF) vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/admin_save.

CPENameOperatorVersion
flycmseq1.0

CPE	Name	Operator	Version
	flycms	eq	1.0

References

github.com/sunkaifei/FlyCms

github.com/sunkaifei/FlyCms/issues/8