CVE-2020-36065

CVE-2020-36065 (FlyCms 1.0) describes a CSRF vulnerability in the FlyCms 1.0 platform that lets an attacker add arbitrary administrator accounts via the endpoint at system/admin/admin_save. The root cause is a CSRF weakness in the admin creation flow, enabling privilege escalation. Reported impac...

CVE-2020-36065

Cross Site Request Forgery CSRF vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/adminsave...

CVE-2020-36065: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/adminsave...

CVE-2020-36065

Cross Site Request Forgery CSRF vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/adminsave...

PT-2023-11799 · Flycms · Flycms

Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: A Cross Site Request Forgery CSRF issue allows attackers to add arbitrary administrator accounts via the "system/admin/admin save" endpoint. This can be exploited by attackers to gain unauthorized access to the...

Sunkaifei FlyCms Cross-Site Request Forgery Vulnerability

sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site builder . sunkaifei FlyCms version 1.0 security vulnerabilities , the vulnerability stems from the existence of cross-site request...

CVE-2020-19613

Server Side Request Forgery SSRF vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503...

CVE-2020-19613

Server Side Request Forgery SSRF vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503...

Server side request forgery (ssrf)

Server Side Request Forgery SSRF vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503...

CVE-2020-19613

CVE-2020-19613 is an SSRF in sunkaifei FlyCMS (version 20190503). Affected component: ImagesService.java, function saveUrlAs. The vulnerability is described across multiple sources as a Server Side Request Forgery affecting FlyCMS, but the connected documents do not provide exploitation details, ...

CVE-2020-19613

Server Side Request Forgery SSRF vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503...

CVE-2020-19613

Server Side Request Forgery SSRF vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503...

CVE-2020-19613: Server-Side Request Forgery (SSRF)

Server Side Request Forgery SSRF vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503...

PT-2021-10373

Name of the Vulnerable Software and Affected Versions: FlyCMS version 20190503 Description: A Server Side Request Forgery SSRF issue exists in the saveUrlAs function within ImagesService.java. This allows for potential exploitation. Recommendations: For FlyCMS version 20190503, consider disabling...

Sunkaifei FlyCM code issue vulnerability

sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social network building program . sunkaifei FlyCM has a security vulnerability , the vulnerability stems from ImagesService.java saveUrlAs function has a...