230 matches found
Cross site scripting
FlyCms 1.0 is vulnerable to Cross Site Scripting XSS in the system website settings website name section...
Cross site request forgery (csrf)
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/user/groupupdate...
Cross site request forgery (csrf)
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/admin/addgroupsave...
Cross site request forgery (csrf)
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/user/groupsave...
Cross site scripting
FlyCms 1.0 is vulnerable to Cross Site Scripting XSS in the email settings of the website settings section...
Cross site request forgery (csrf)
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/score/del...
CVE-2024-22601
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/score/scorerulesave...
CVE-2024-22699
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/admin/updategroupsave...
CVE-2024-22592
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/user/groupupdate...
CVE-2024-22592
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/user/groupupdate...
CVE-2024-22818
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerbility via /system/site/filterKeywordsave...
CVE-2024-22593: Cross-Site Request Forgery (CSRF)
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/admin/addgroupsave...
FlyCms Security Vulnerability
sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site builder . FlyCms security vulnerabilities , the vulnerability stems from /system/score/scorerulesave location cross-site request...
CVE-2024-22601
CVE-2024-22601 concerns FlyCms v1.0 and a CSRF vulnerability exploitable at the API endpoint /system/score/scorerule_save. The connected documents consistently describe a Cross-Site Request Forgery issue in FlyCms 1.0, with the underlying risk indicated as high (CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U...
FlyCms Security Vulnerability
sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site builder . FlyCms security vulnerabilities , the vulnerability stems from /system/user/groupsave location cross-site request forgery...
PT-2024-19497 · Flycms · Flycms
Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. It can be exploited via the /system/user/group update API endpoint. Recommendations: For FlyCms version 1.0, as a temporary workaround, consider...
PT-2024-19481 · Flycms · Flycms
Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is related to Cross Site Scripting XSS in the email settings of the website settings section. This allows for potential malicious script injection. Recommendations: For FlyCms version 1.0, as a...
FlyCms Security Vulnerability
sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site builder . FlyCms security vulnerabilities , the vulnerability stems from /system/admin/updategroupsave location cross-site request...