4 matches found
CVE-2024-51157
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery CSRF via the component http://erp.07fly.net:80/oa/OaSchedule/add.html...
4.7CVSS5AI score0.00175EPSS
SaveExploits1References1
CVE-2024-51157
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery CSRF via the component http://erp.07fly.net:80/oa/OaSchedule/add.html...
4.7CVSS0.00175EPSS
SaveExploits1References1
CVE-2024-51157
CVE-2024-51157 affects 07FLYCMS V1.3.9 with a CSRF vulnerability in the /oa/OaSchedule/add.html endpoint. The CVSS-3.1 vector (AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N) yields a base score of 4.7 (Medium). Exploitation details are not provided beyond the CSRF description; no public fix/version remedia...
4.7CVSS7.2AI score0.00175EPSS
SaveExploits1References1Affected Software1
20