255 matches found
CVE-2023-52072
Affected software/variant: FlyCms v1.0. The vulnerability is a Cross-Site Request Forgery (CSRF) in the component "/system/site/userconfig_updagte". Impact (as stated): allows unauthorized actions to be performed via CSRF, with high-severity metrics (CVSSv3.1 base score 8.8, HIGH). The attack vec...
CVE-2023-52074
FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component system/site/webconfigupdagte...
CVE-2023-52072
FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/site/userconfigupdagte...
CVE-2023-52072
FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/site/userconfigupdagte...
FlyCms Cross-Site Request Forgery Vulnerability
sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site building program . FlyCms v1.0 version of the existence of cross-site request forgery vulnerability , the vulnerability stems from t...
FlyCms Cross-Site Request Forgery Vulnerability
sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site building program . FlyCms v1.0 version of the existence of cross-site request forgery vulnerability , the vulnerability stems from t...
CVE-2024-21732
FlyCms through abbaa5a allows XSS via the permission management feature...
CVE-2024-21732
FlyCms through abbaa5a allows XSS via the permission management feature...
Information disclosure
FlyCms through abbaa5a allows XSS via the permission management feature...
PT-2024-19026 · Flycms · Flycms
Name of the Vulnerable Software and Affected Versions: FlyCms through abbaa5a Description: The issue allows XSS via the permission management feature. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...
CVE-2024-21732
FlyCms through abbaa5a allows XSS via the permission management feature...
CVE-2024-21732
FlyCms through abbaa5a allows XSS via the permission management feature...
CVE-2024-21732
FlyCms through abbaa5a allows XSS via the permission management feature...
CVE-2024-21732: Improper Neutralization of Input During Web Page Generation
FlyCms through abbaa5a allows XSS via the permission management feature...
FlyCms Security Vulnerability
sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site builder . FlyCms v1.0 version of a security vulnerability , the vulnerability stems from allowing cross-site scripting XSS attacks...
CVE-2024-21732
The CVE-2024-21732 entry concerns FlyCms using commit abbaa5a, where an XSS flaw is exposed through the permission management feature. The advisory indicates that an attacker can exploit this via a reflected or stored XSS path within the permission management UI, with CVSS v3.1 metrics: AV:N/AC:L...
CVE-2020-36065
Cross Site Request Forgery CSRF vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/adminsave...
CVE-2020-36065
Cross Site Request Forgery CSRF vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/adminsave...