CVE-2020-36065

CVE-2020-36065 (FlyCms 1.0) describes a CSRF vulnerability in the FlyCms 1.0 platform that lets an attacker add arbitrary administrator accounts via the endpoint at system/admin/admin_save. The root cause is a CSRF weakness in the admin creation flow, enabling privilege escalation. Reported impac...

CVE-2020-36065: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/adminsave...

PT-2023-11799 · Flycms · Flycms

Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: A Cross Site Request Forgery CSRF issue allows attackers to add arbitrary administrator accounts via the "system/admin/admin save" endpoint. This can be exploited by attackers to gain unauthorized access to the...

CVE-2020-19613

Server Side Request Forgery SSRF vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503...

CVE-2020-19613

Server Side Request Forgery SSRF vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503...

Server side request forgery (ssrf)

Server Side Request Forgery SSRF vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503...

CVE-2020-19613

CVE-2020-19613 is an SSRF in sunkaifei FlyCMS (version 20190503). Affected component: ImagesService.java, function saveUrlAs. The vulnerability is described across multiple sources as a Server Side Request Forgery affecting FlyCMS, but the connected documents do not provide exploitation details, ...

CVE-2020-19613

Server Side Request Forgery SSRF vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503...

CVE-2020-19613: Server-Side Request Forgery (SSRF)

Server Side Request Forgery SSRF vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503...

sunkaifei FlyCM 代码问题漏洞

sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social network building program . sunkaifei FlyCM has a security vulnerability , the vulnerability stems from ImagesService.java saveUrlAs function has a...