CVE-2024-22568

FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability exploitable via /system/score/del. The CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a base score of 8.8 (HIGH), indicating high impact on confidentiality, integrity, and availability. Exploitation status is no...

FlyCms Security Vulnerability

sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social network building program . FlyCms security vulnerabilities , the vulnerability stems from /system/links/addlink location cross-site request forgery...

CVE-2023-52073

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/site/configfooterupdagte...

CVE-2023-52072

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/site/userconfigupdagte...

CVE-2023-52073

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/site/configfooterupdagte...

CVE-2023-52074

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component system/site/webconfigupdagte...

CVE-2023-52074

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component system/site/webconfigupdagte...

CVE-2023-52072

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/site/userconfigupdagte...

Cross site request forgery (csrf)

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component system/site/webconfigupdagte...

Cross site request forgery (csrf)

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/site/configfooterupdagte...

Cross site request forgery (csrf)

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/site/userconfigupdagte...

CVE-2023-52074

CVE-2023-52074 affects FlyCms v1.0 with a Cross-Site Request Forgery (CSRF) vulnerability in the component path system/site/webconfig_updagte . Descriptions across sources consistently state CSRF as the issue; the root cause is the CSRF in that component, enabling unauthorized actions to be perfo...

CVE-2023-52073

CVE-2023-52073 affects FlyCms v1.0 with a Cross-Site Request Forgery (CSRF) vulnerability in the component "/system/site/config_footer_updagte". Public sources indicate a high-severity issue (CVSS 3.1: 8.8) allowing unauthorized actions via CSRF, with user interaction required. A practical remedi...

CVE-2023-52072

Affected software/variant: FlyCms v1.0. The vulnerability is a Cross-Site Request Forgery (CSRF) in the component "/system/site/userconfig_updagte". Impact (as stated): allows unauthorized actions to be performed via CSRF, with high-severity metrics (CVSSv3.1 base score 8.8, HIGH). The attack vec...

FlyCms Cross-Site Request Forgery Vulnerability

sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site building program . FlyCms v1.0 version of the existence of cross-site request forgery vulnerability , the vulnerability stems from t...

FlyCms Cross-Site Request Forgery Vulnerability

sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site building program . FlyCms v1.0 version of the existence of cross-site request forgery vulnerability , the vulnerability stems from t...

CVE-2023-52072

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/site/userconfigupdagte...

PT-2024-14387 · Flycms · Flycms

Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is related to Cross-Site Request Forgery CSRF via the component system/site/webconfig updagte. This allows for unauthorized actions to be performed on behalf of a user. Recommendations: For FlyCms...

PT-2024-14385 · Flycms · Flycms

Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is related to a Cross-Site Request Forgery CSRF in the component "/system/site/userconfig updagte". This allows for unauthorized actions to be performed on behalf of a user. Recommendations: For FlyCm...

FlyCms Cross-Site Request Forgery Vulnerability

sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site building program . FlyCms v1.0 version of the existence of cross-site request forgery vulnerability , the vulnerability stems from t...