230 matches found
CVE-2024-22548
FlyCms 1.0 is vulnerable to Cross Site Scripting XSS in the system website settings website name section...
CVE-2024-22817
FlyCms v1.0 is affected by a Cross-Site Request Forgery (CSRF) vulnerability in the /system/email/email_conf_updagte endpoint. The CVE-2024-22817 entry indicates a high-severity issue (CVSS 3.1: 8.8) with network attack vector, low attack complexity, no privileges required, and user interaction r...
CVE-2024-22568
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/score/del...
FlyCms Security Vulnerability
sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social network building program . FlyCms has a security vulnerability , the vulnerability stems from /system/score/del location cross-site request forgery...
FlyCms Security Vulnerability
sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site builder . FlyCms security vulnerabilities , the vulnerability stems from /system/user/groupsave location cross-site request forgery...
CVE-2024-22593
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/admin/addgroupsave...
FlyCms Security Vulnerability
sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site builder . FlyCms security vulnerabilities , the vulnerability stems from the existence of cross-site scripting vulnerabilities...
CVE-2024-22699
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/admin/updategroupsave...
CVE-2024-22817: Cross-Site Request Forgery (CSRF)
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/email/emailconfupdagte...
CVE-2024-22549: Improper Neutralization of Input During Web Page Generation
FlyCms 1.0 is vulnerable to Cross Site Scripting XSS in the email settings of the website settings section...
CVE-2024-22591
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/user/groupsave...
PT-2024-19498 · Flycms · Flycms
Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. It occurs via the "/system/admin/add group save" API endpoint. This allows for potentially unauthorized actions to be performed on behalf of an...
PT-2024-19575 · Flycms · Flycms
Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. It can be exploited via the "/system/email/email conf updagte" API endpoint. This vulnerability allows an attacker to perform unauthorized actions o...
FlyCms Security Vulnerability
sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site builder . FlyCms security vulnerabilities , the vulnerability stems from /system/email/emailconfupdagte location cross-site request...
CVE-2024-22601
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/score/scorerulesave...
PT-2024-19577 · Flycms · Flycms
Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. It occurs via the /system/email/email templets update API endpoint. This allows for potentially malicious requests to be made without the user's...
CVE-2024-22699: Cross-Site Request Forgery (CSRF)
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/admin/updategroupsave...
CVE-2024-22591
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/user/groupsave...