230 matches found
FlyCms Security Vulnerability
sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site builder . FlyCms security vulnerabilities , the vulnerability stems from the existence of cross-site scripting vulnerabilities...
CVE-2024-22591: Cross-Site Request Forgery (CSRF)
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/user/groupsave...
CVE-2024-22603
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/links/addlink...
FlyCms 安全漏洞
FlyCms is sunkaifei open source an application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social network building program . FlyCms cross-site request forgery vulnerability , the vulnerability stems from /system/admin/addgroupsave location does not...
PT-2024-19531 · Flycms · Flycms
Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. It can be exploited via the "/system/admin/update group save" API endpoint. Recommendations: For FlyCms version 1.0, as a temporary workaround,...
CVE-2024-22548
FlyCms 1.0 is vulnerable to Cross Site Scripting XSS in the system website settings website name section...
PT-2024-19496 · Flycms · Flycms
Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. It can be exploited via the /system/user/group save API endpoint. Recommendations: For FlyCms version 1.0, as a temporary workaround, consider...
CVE-2024-22819
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/email/emailtempletsupdate...
CVE-2024-22817
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/email/emailconfupdagte...
CVE-2024-22819
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/email/emailtempletsupdate...
CVE-2024-22548: Improper Neutralization of Input During Web Page Generation
FlyCms 1.0 is vulnerable to Cross Site Scripting XSS in the system website settings website name section...
CVE-2024-22818: Cross-Site Request Forgery (CSRF)
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerbility via /system/site/filterKeywordsave...
CVE-2024-22601: Cross-Site Request Forgery (CSRF)
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/score/scorerulesave...
CVE-2024-22568: Cross-Site Request Forgery (CSRF)
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/score/del...
FlyCms Security Vulnerability
sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social network building program . FlyCms security vulnerabilities , the vulnerability stems from /system/links/addlink location cross-site request forgery...
CVE-2024-22603: Cross-Site Request Forgery (CSRF)
FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/links/addlink...
CVE-2024-22549
FlyCms 1.0 is reported vulnerable to Cross Site Scripting (XSS) in the email settings of the website settings section. The affected component is the email settings area within FlyCms 1.0; the available documents do not provide root-cause specifics or formal patch details. Exploitation status is n...
CVE-2024-22592
FlyCms v1.0 is affected by a Cross-Site Request Forgery (CSRF) vulnerability in the /system/user/group_update endpoint. The CVSS metrics indicate a High impact across confidentiality, integrity, and availability with network access, low attack complexity, no privileges required, and user interact...
