Lucene search
+L

207 matches found

Cvelist
Cvelist
added 2024/01/18 12:0 a.m.52 views

CVE-2024-22593

FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/admin/addgroupsave...

9AI score0.00324EPSS
SaveExploits1References1
OSV
OSV
added 2024/01/08 10:15 p.m.7 views

CVE-2023-52073

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/site/configfooterupdagte...

8.8CVSS7.3AI score0.00286EPSS
SaveExploits1References1
OSV
OSV
added 2024/01/08 10:15 p.m.5 views

CVE-2023-52072

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/site/userconfigupdagte...

8.8CVSS5.8AI score0.00286EPSS
SaveExploits1References1
NVD
NVD
added 2024/01/08 10:15 p.m.21 views

CVE-2023-52073

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/site/configfooterupdagte...

8.8CVSS8.9AI score0.00286EPSS
SaveExploits1References1
NVD
NVD
added 2024/01/08 10:15 p.m.23 views

CVE-2023-52074

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component system/site/webconfigupdagte...

8.8CVSS8.9AI score0.00286EPSS
SaveExploits1References1
OSV
OSV
added 2024/01/08 10:15 p.m.4 views

CVE-2023-52074

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component system/site/webconfigupdagte...

8.8CVSS5.8AI score0.00286EPSS
SaveExploits1References1
NVD
NVD
added 2024/01/08 10:15 p.m.17 views

CVE-2023-52072

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/site/userconfigupdagte...

8.8CVSS8.9AI score0.00286EPSS
SaveExploits1References1
Prion
Prion
added 2024/01/08 10:15 p.m.19 views

Cross site request forgery (csrf)

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component system/site/webconfigupdagte...

6.8CVSS7.8AI score0.00286EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2024/01/08 10:15 p.m.19 views

Cross site request forgery (csrf)

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/site/configfooterupdagte...

6.8CVSS7.8AI score0.00286EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2024/01/08 10:15 p.m.16 views

Cross site request forgery (csrf)

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/site/userconfigupdagte...

6.8CVSS7.8AI score0.00286EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.7 views

FlyCms Cross-Site Request Forgery Vulnerability

sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site building program . FlyCms v1.0 version of the existence of cross-site request forgery vulnerability , the vulnerability stems from t...

8.8CVSS6.7AI score0.00286EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/01/08 12:0 a.m.4 views

PT-2024-14385 · Flycms · Flycms

Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is related to a Cross-Site Request Forgery CSRF in the component "/system/site/userconfig updagte". This allows for unauthorized actions to be performed on behalf of a user. Recommendations: For FlyCm...

8.8CVSS8.5AI score0.00286EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/01/08 12:0 a.m.10 views

PT-2024-14387 · Flycms · Flycms

Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is related to Cross-Site Request Forgery CSRF via the component system/site/webconfig updagte. This allows for unauthorized actions to be performed on behalf of a user. Recommendations: For FlyCms...

8.8CVSS8.5AI score0.00286EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2024/01/08 12:0 a.m.9 views

CVE-2023-52072

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/site/userconfigupdagte...

8.9AI score0.00286EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.6 views

FlyCms Cross-Site Request Forgery Vulnerability

sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site building program . FlyCms v1.0 version of the existence of cross-site request forgery vulnerability , the vulnerability stems from t...

8.8CVSS6.7AI score0.00286EPSS
SaveExploits1References2
CVE
CVE
added 2024/01/08 12:0 a.m.42 views

CVE-2023-52072

Affected software/variant: FlyCms v1.0. The vulnerability is a Cross-Site Request Forgery (CSRF) in the component "/system/site/userconfig_updagte". Impact (as stated): allows unauthorized actions to be performed via CSRF, with high-severity metrics (CVSSv3.1 base score 8.8, HIGH). The attack vec...

8.8CVSS8.8AI score0.00286EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2024/01/08 12:0 a.m.49 views

CVE-2023-52073

CVE-2023-52073 affects FlyCms v1.0 with a Cross-Site Request Forgery (CSRF) vulnerability in the component "/system/site/config_footer_updagte". Public sources indicate a high-severity issue (CVSS 3.1: 8.8) allowing unauthorized actions via CSRF, with user interaction required. A practical remedi...

8.8CVSS8.8AI score0.00286EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2024/01/08 12:0 a.m.52 views

CVE-2023-52074

CVE-2023-52074 affects FlyCms v1.0 with a Cross-Site Request Forgery (CSRF) vulnerability in the component path system/site/webconfig_updagte . Descriptions across sources consistently state CSRF as the issue; the root cause is the CSRF in that component, enabling unauthorized actions to be perfo...

8.8CVSS8.8AI score0.00286EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.6 views

FlyCms Cross-Site Request Forgery Vulnerability

sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site building program . FlyCms v1.0 version of the existence of cross-site request forgery vulnerability , the vulnerability stems from t...

8.8CVSS6.7AI score0.00286EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/01/08 12:0 a.m.33 views

CVE-2023-52074

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component system/site/webconfigupdagte...

9AI score0.00286EPSS
SaveExploits1References1
Rows per page
Query Builder