CVE-2024-46600

dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/doAdminAction.php?act=delCate=31...

CVE-2024-48291

The dingfanzu CMS version 1.0 is vulnerable to a Cross-Site Request Forgery (CSRF) flaw. The vulnerability is located in the /admin/doAdminAction.php endpoint, specifically when the act parameter is set to editAdmin and the id parameter is set to 17. This flaw allows an attacker to perform unauth...