CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

osv_cve•added 2024/09/25 4:15 p.m.•14 views

CVE-2024-46485

dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery CSRF via /admin/doAdminAction.php?act=addCate...

6.3CVSS5.8AI score0.00189EPSS

SaveExploits1References1

NVD•added 2024/09/25 4:15 p.m.•27 views

CVE-2024-46485

dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery CSRF via /admin/doAdminAction.php?act=addCate...

6.3CVSS0.00189EPSS

SaveExploits1References1

Vulnrichment•added 2024/09/25 12:00 a.m.•25 views

CVE-2024-46485

dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery CSRF via /admin/doAdminAction.php?act=addCate...

5.8AI score0.00189EPSS

SaveExploits1References1

CVE•added 2024/09/25 12:00 a.m.•84 views

CVE-2024-46485

The dingfanzu CMS version 1.0 is vulnerable to a Cross-Site Request Forgery (CSRF) via the /admin/doAdminAction.php?act=addCate API endpoint. This flaw allows an attacker to perform unauthorized actions on the system. As a temporary workaround, it is recommended to restrict access to this specifi...

6.3CVSS5.8AI score0.00189EPSS

SaveExploits1References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2024/09/25 12:00 a.m.•7 views

CVE-2024-46485: Cross-Site Request Forgery (CSRF)

dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery CSRF via /admin/doAdminAction.php?act=addCate...

6.3CVSS5.8AI score0.00189EPSS

SaveExploits1References1

Mend•added 2024/09/25 12:00 a.m.•11 views

CVE-2024-46485

dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery CSRF via /admin/doAdminAction.php?act=addCate...

6.3CVSS5.8AI score0.00189EPSS

SaveExploits1References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by