CVE-2023-52073

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/site/configfooterupdagte...

CVE-2023-52072

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/site/userconfigupdagte...

CVE-2023-52073: Cross-Site Request Forgery (CSRF)

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/site/configfooterupdagte...

PT-2024-14386 · Flycms · Flycms

Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is related to a Cross-Site Request Forgery CSRF in the component "/system/site/config footer updagte". This allows for unauthorized actions to be performed on behalf of a user. Recommendations: For...

CVE-2023-52072: Cross-Site Request Forgery (CSRF)

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/site/userconfigupdagte...

CVE-2024-21732

FlyCms through abbaa5a allows XSS via the permission management feature...

CVE-2024-21732

FlyCms through abbaa5a allows XSS via the permission management feature...

Information disclosure

FlyCms through abbaa5a allows XSS via the permission management feature...

PT-2024-19026 · Flycms · Flycms

Name of the Vulnerable Software and Affected Versions: FlyCms through abbaa5a Description: The issue allows XSS via the permission management feature. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

CVE-2024-21732

FlyCms through abbaa5a allows XSS via the permission management feature...

CVE-2024-21732

The CVE-2024-21732 entry concerns FlyCms using commit abbaa5a, where an XSS flaw is exposed through the permission management feature. The advisory indicates that an attacker can exploit this via a reflected or stored XSS path within the permission management UI, with CVSS v3.1 metrics: AV:N/AC:L...

CVE-2024-21732: Improper Neutralization of Input During Web Page Generation

FlyCms through abbaa5a allows XSS via the permission management feature...

FlyCms Security Vulnerability

sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site builder . FlyCms v1.0 version of a security vulnerability , the vulnerability stems from allowing cross-site scripting XSS attacks...

CVE-2024-21732

FlyCms through abbaa5a allows XSS via the permission management feature...

CVE-2020-36065

Cross Site Request Forgery CSRF vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/adminsave...

CVE-2020-36065

Cross Site Request Forgery CSRF vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/adminsave...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/adminsave...

CVE-2020-36065

Cross Site Request Forgery CSRF vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/adminsave...

sunkaifei FlyCms 跨站请求伪造漏洞

sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site builder . sunkaifei FlyCms version 1.0 security vulnerabilities , the vulnerability stems from the existence of cross-site request...

CVE-2020-36065

CVE-2020-36065 (FlyCms 1.0) describes a CSRF vulnerability in the FlyCms 1.0 platform that lets an attacker add arbitrary administrator accounts via the endpoint at system/admin/admin_save. The root cause is a CSRF weakness in the admin creation flow, enabling privilege escalation. Reported impac...