flusity CMS Security Vulnerability

flusity CMS is a user interactive interface solution where code can be easily changed or added. A security vulnerability exists in flusity CMS version v.2.33. A remote attacker can exploit this vulnerability to execute arbitrary code via deletepost .php...

CVE-2024-24469

Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the deletepost .php...

CVE-2024-24469

Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the deletepost .php...

flusity CMS Security Vulnerability

flusity CMS is a user interactive interface solution where code can be easily changed or added. A security vulnerability exists in flusity CMS version v.2.33. A remote attacker can exploit this vulnerability to execute arbitrary code via addcustomblock.php...

PT-2024-20409 · Unknown · Flusity-Cms

Name of the Vulnerable Software and Affected Versions: flusity-CMS version 2.33 Description: A Cross Site Request Forgery issue allows a remote attacker to execute arbitrary code via the "add customblock.php" endpoint. Recommendations: For flusity-CMS version 2.33, consider disabling access to th...

CVE-2024-24469

CVE-2024-24469 : A Cross Site Request Forgery flaw in flusity-CMS v2.33 allows a remote attacker to execute arbitrary code via the delete_post.php endpoint. The public records confirm an ARBITRARY CODE EXECUTION risk with a CVSSv3.1 base score of 8.8 (HIGH) and an attack vector of network with us...

CVE-2024-24468

CVE-2024-24468 affects flusity-CMS v2.33. A Cross Site Request Forgery allows a remote attacker to execute arbitrary code via add_customblock.php. Severity according to NVD/CVE data is high (CVSS v3.1: 8.8; AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The vulnerability impact is described as remote arbi...

CVE-2024-24469

Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the deletepost .php...

CVE-2024-24468

Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the addcustomblock.php...

PT-2024-2362 · Unknown · Flusity-Cms

Name of the Vulnerable Software and Affected Versions: flusity-CMS version 2.33 Description: The issue is related to a Cross-Site Request Forgery CSRF in the /core/tools/add translation.php component. This could allow an attacker to perform a CSRF attack. Recommendations: For flusity-CMS version...

Cross site request forgery (csrf)

Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the updatepost.php component...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability in flusity-CMS v.2.33, allows remote attackers to execute arbitrary code via the addmenu.php component...

CVE-2024-24470

Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the updatepost.php component...

CVE-2024-24524

This CVE concerns flusity-CMS version 2.33, where a Cross Site Request Forgery (CSRF) in the add_menu.php component can allow remote attackers to execute arbitrary code. The description across multiple sources consistently identifies the vulnerable surface as add_menu.php and the vulnerable appli...

PT-2024-20434 · Unknown · Flusity-Cms

Name of the Vulnerable Software and Affected Versions: flusity-CMS version 2.33 Description: A Cross Site Request Forgery CSRF issue allows remote attackers to execute arbitrary code via the add menu.php component. This enables attackers to perform unauthorized actions on behalf of a legitimate...

CVE-2024-24470

CVE-2024-24470 is a CSRF vulnerability in flusity-CMS 2.33 exploitable via update_post.php that can lead to remote arbitrary code execution. Affected component: update_post.php in flusity-CMS v2.33. Root cause: Cross Site Request Forgery. Reported in multiple sources (NVD/Red Hat/etc.). PoC exist...

CVE-2024-24470

Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the updatepost.php component...

flusity CMS Security Vulnerability

flusity CMS is a user interactive interface solution where code can be easily changed or added. A security vulnerability exists in flusity-CMS version v.2.33. A remote attacker can exploit this vulnerability to execute arbitrary code via the updatepost.php component...

CVE-2024-24470

Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the updatepost.php component...

flusity CMS Security Vulnerability

flusity CMS is a user interactive interface solution where code can be easily changed or added. A security vulnerability exists in flusity CMS version v.2.33. A remote attacker can exploit this vulnerability to execute arbitrary code via the addmenu.php component...