CVE-2024-46600

dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/doAdminAction.php?act=delCate=31...

CVE-2024-48291

CVE-2024-48291 affects dingfanzu CMS 1.0. The vulnerability is a Cross-Site Request Forgery (CSRF) in the admin action endpoint: /admin/doAdminAction.php?act=editAdmin&id=17. According to available sources, exploitation requires user interaction, with a CVSS v3.1 base score of 6.3 (MEDIUM) and lo...