237 matches found
CVE-2024-24469
Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the deletepost .php...
CVE-2024-24468
CVE-2024-24468 affects flusity-CMS v2.33. A Cross Site Request Forgery allows a remote attacker to execute arbitrary code via add_customblock.php. Severity according to NVD/CVE data is high (CVSS v3.1: 8.8; AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The vulnerability impact is described as remote arbi...
flusity CMS Security Vulnerability
flusity CMS is a user interactive interface solution where code can be easily changed or added. A security vulnerability exists in flusity CMS version v.2.33. A remote attacker can exploit this vulnerability to execute arbitrary code via addcustomblock.php...
flusity CMS Security Vulnerability
flusity CMS is a user interactive interface solution where code can be easily changed or added. A security vulnerability exists in flusity CMS version v.2.33. A remote attacker can exploit this vulnerability to execute arbitrary code via deletepost .php...
CVE-2024-24469
CVE-2024-24469 : A Cross Site Request Forgery flaw in flusity-CMS v2.33 allows a remote attacker to execute arbitrary code via the delete_post.php endpoint. The public records confirm an ARBITRARY CODE EXECUTION risk with a CVSSv3.1 base score of 8.8 (HIGH) and an attack vector of network with us...
PT-2024-20409 · Unknown · Flusity-Cms
Name of the Vulnerable Software and Affected Versions: flusity-CMS version 2.33 Description: A Cross Site Request Forgery issue allows a remote attacker to execute arbitrary code via the "add customblock.php" endpoint. Recommendations: For flusity-CMS version 2.33, consider disabling access to th...
CVE-2024-24469
Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the deletepost .php...
PT-2024-20410 · Unknown · Flusity-Cms
Name of the Vulnerable Software and Affected Versions: flusity-CMS version 2.33 Description: A Cross Site Request Forgery issue allows a remote attacker to execute arbitrary code via the delete post.php endpoint. Recommendations: For flusity-CMS version 2.33, consider disabling access to the dele...
CVE-2024-24468
Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the addcustomblock.php...
CVE-2024-24469
Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the deletepost .php...
CVE-2024-24468
Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the addcustomblock.php...
PT-2024-2362 · Unknown · Flusity-Cms
Name of the Vulnerable Software and Affected Versions: flusity-CMS version 2.33 Description: The issue is related to a Cross-Site Request Forgery CSRF in the /core/tools/add translation.php component. This could allow an attacker to perform a CSRF attack. Recommendations: For flusity-CMS version...
Cross site request forgery (csrf)
Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the updatepost.php component...
Cross site request forgery (csrf)
Cross Site Request Forgery CSRF vulnerability in flusity-CMS v.2.33, allows remote attackers to execute arbitrary code via the addmenu.php component...
PT-2024-20434 · Unknown · Flusity-Cms
Name of the Vulnerable Software and Affected Versions: flusity-CMS version 2.33 Description: A Cross Site Request Forgery CSRF issue allows remote attackers to execute arbitrary code via the add menu.php component. This enables attackers to perform unauthorized actions on behalf of a legitimate...
flusity CMS Security Vulnerability
flusity CMS is a user interactive interface solution where code can be easily changed or added. A security vulnerability exists in flusity CMS version v.2.33. A remote attacker can exploit this vulnerability to execute arbitrary code via the addmenu.php component...
flusity CMS Security Vulnerability
flusity CMS is a user interactive interface solution where code can be easily changed or added. A security vulnerability exists in flusity-CMS version v.2.33. A remote attacker can exploit this vulnerability to execute arbitrary code via the updatepost.php component...
CVE-2024-24524
Cross Site Request Forgery CSRF vulnerability in flusity-CMS v.2.33, allows remote attackers to execute arbitrary code via the addmenu.php component...