207 matches found
FlyCms 安全漏洞
FlyCms is sunkaifei open source an application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social network building program . FlyCms cross-site request forgery vulnerability , the vulnerability stems from /system/admin/addgroupsave location does not...
PT-2024-19531 · Flycms · Flycms
Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. It can be exploited via the "/system/admin/update group save" API endpoint. Recommendations: For FlyCms version 1.0, as a temporary workaround,...
FlyCms Security Vulnerability
sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site builder . FlyCms security vulnerabilities , the vulnerability stems from /system/site/filterKeywordsave location cross-site request...
CVE-2024-22819
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/email/emailtempletsupdate...
FlyCms Security Vulnerability
sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site builder . FlyCms security vulnerabilities , the vulnerability stems from /system/user/groupupdate location cross-site request forger...
FlyCms Security Vulnerability
sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site builder . FlyCms security vulnerabilities , the vulnerability stems from the existence of cross-site scripting vulnerabilities...
CVE-2024-22593
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/admin/addgroupsave...
PT-2024-19576 · Flycms · Flycms
Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. It occurs via the "/system/site/filterKeyword save" API endpoint. This allows for potential unauthorized actions on the system. Recommendations: For...
CVE-2024-22603
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/links/addlink...
CVE-2024-22548
FlyCms 1.0 is vulnerable to Cross Site Scripting XSS in the system website settings website name section...
FlyCms Security Vulnerability
sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social network building program . FlyCms security vulnerabilities , the vulnerability stems from /system/links/addlink location cross-site request forgery...
CVE-2024-22817
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/email/emailconfupdagte...
CVE-2024-22549
FlyCms 1.0 is reported vulnerable to Cross Site Scripting (XSS) in the email settings of the website settings section. The affected component is the email settings area within FlyCms 1.0; the available documents do not provide root-cause specifics or formal patch details. Exploitation status is n...
CVE-2024-22568
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability exploitable via /system/score/del. The CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a base score of 8.8 (HIGH), indicating high impact on confidentiality, integrity, and availability. Exploitation status is no...
CVE-2024-22592
FlyCms v1.0 is affected by a Cross-Site Request Forgery (CSRF) vulnerability in the /system/user/group_update endpoint. The CVSS metrics indicate a High impact across confidentiality, integrity, and availability with network access, low attack complexity, no privileges required, and user interact...
CVE-2024-22591
Summary: CVE-2024-22591 affects FlyCms v1.0 and is a Cross-Site Request Forgery (CSRF) vulnerability exploitable via the /system/user/group_save endpoint. The NVD/Red Hat/CNNVD entries all reinforce the same flaw, with a CVSS v3.1 base score of 8.8 (High impact) and an attack vector of Network wi...
CVE-2024-22819
CVE-2024-22819 affects FlyCms v1.0 and is a Cross-Site Request Forgery (CSRF) vulnerability exploitable via the /system/email/email_templets_update endpoint. The issue arises from an unsafe CSRF protection surface on that API, allowing unintended requests to be performed in the context of an auth...
PT-2024-19480 · Flycms · Flycms
Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is related to Cross Site Scripting XSS in the system website settings, specifically in the website name section. This allows for potential malicious script injection. No information is provided about...
PT-2024-19496 · Flycms · Flycms
Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. It can be exploited via the /system/user/group save API endpoint. Recommendations: For FlyCms version 1.0, as a temporary workaround, consider...