CVE-2024-22699

FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/admin/updategroupsave...

CVE-2024-22601

FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/score/scorerulesave...

CVE-2024-22548

Summary: CVE-2024-22548 affects FlyCms 1.0, with a Cross Site Scripting (XSS) vulnerability in the system website settings, specifically the website name field. What’s in scope (from provided docs): The vulnerability is described as XSS in FlyCms 1.0. CVSS v3.1 metrics indicate a base score of 5....

CVE-2024-22593

FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/admin/addgroupsave...

CVE-2024-22601

FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/score/scorerulesave...

CVE-2024-22592

FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/user/groupupdate...

CVE-2024-22818

FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerbility via /system/site/filterKeywordsave...

PT-2024-19481 · Flycms · Flycms

Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is related to Cross Site Scripting XSS in the email settings of the website settings section. This allows for potential malicious script injection. Recommendations: For FlyCms version 1.0, as a...

CVE-2024-22818

FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerbility via /system/site/filterKeywordsave...

CVE-2024-22592

FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/user/groupupdate...

CVE-2024-22817

FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/email/emailconfupdagte...

CVE-2024-22548

FlyCms 1.0 is vulnerable to Cross Site Scripting XSS in the system website settings website name section...

PT-2024-19576 · Flycms · Flycms

Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. It occurs via the "/system/site/filterKeyword save" API endpoint. This allows for potential unauthorized actions on the system. Recommendations: For...

PT-2024-19496 · Flycms · Flycms

Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. It can be exploited via the /system/user/group save API endpoint. Recommendations: For FlyCms version 1.0, as a temporary workaround, consider...

FlyCms 安全漏洞

FlyCms is sunkaifei open source an application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social network building program . FlyCms cross-site request forgery vulnerability , the vulnerability stems from /system/admin/addgroupsave location does not...

PT-2024-19498 · Flycms · Flycms

Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. It occurs via the "/system/admin/add group save" API endpoint. This allows for potentially unauthorized actions to be performed on behalf of an...

PT-2024-19531 · Flycms · Flycms

Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. It can be exploited via the "/system/admin/update group save" API endpoint. Recommendations: For FlyCms version 1.0, as a temporary workaround,...

CVE-2024-22817

FlyCms v1.0 is affected by a Cross-Site Request Forgery (CSRF) vulnerability in the /system/email/email_conf_updagte endpoint. The CVE-2024-22817 entry indicates a high-severity issue (CVSS 3.1: 8.8) with network attack vector, low attack complexity, no privileges required, and user interaction r...

PT-2024-19575 · Flycms · Flycms

Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. It can be exploited via the "/system/email/email conf updagte" API endpoint. This vulnerability allows an attacker to perform unauthorized actions o...

FlyCms Security Vulnerability

sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social network building program . FlyCms has a security vulnerability , the vulnerability stems from /system/score/del location cross-site request forgery...