Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2025/03/02 12:22 a.m.•21 views

CVE-2025-25379

Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to execute arbitrary code via the id parameter of the del.html component...

9.6CVSS7.8AI score0.00298EPSS
SaveExploits0References1
OSV
OSV
•added 2025/02/28 11:15 p.m.•11 views

CVE-2025-25379

Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to execute arbitrary code via the id parameter of the del.html component...

9.6CVSS6.1AI score0.00298EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/28 12:00 a.m.•2 views

CVE-2025-25379: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to execute arbitrary code via the id parameter of the del.html component...

9.6CVSS6.6AI score0.00298EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/14 12:00 a.m.•1 views

CVE-2024-51156: Cross-Site Request Forgery (CSRF)

07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery CSRF via the component 'erp.07fly.net:80/admin/SysNotifyUser/del.html?id=93'...

4.7CVSS5.7AI score0.00201EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/05/10 12:00 a.m.•5 views

CVE-2004-1875: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in cPanel 9.1.0-R85 allow remote attackers to inject arbitrary web script or HTML via the 1 email parameter to testfile.html, 2 file parameter to erredit.html, 3 dns parameter to dnslook.html, 4 account parameter to ignorelist.html, 5 account...

9.3CVSS5.8AI score0.0456EPSS
SaveExploits1References2
Rows per page
Query Builder