CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

RedhatCVE•added 2025/05/23 6:25 a.m.•7 views

CVE-2024-51157

07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery CSRF via the component http://erp.07fly.net:80/oa/OaSchedule/add.html...

4.7CVSS5AI score0.00159EPSS

Exploits1References1

NVD•added 2024/11/08 9:15 p.m.•14 views

CVE-2024-51157

07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery CSRF via the component http://erp.07fly.net:80/oa/OaSchedule/add.html...

4.7CVSS0.00159EPSS

Exploits1References1

CVE•added 2024/11/08 12:0 a.m.•50 views

CVE-2024-51157

CVE-2024-51157 affects 07FLYCMS V1.3.9 with a CSRF vulnerability in the /oa/OaSchedule/add.html endpoint. The CVSS-3.1 vector (AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N) yields a base score of 4.7 (Medium). Exploitation details are not provided beyond the CSRF description; no public fix/version remedia...

4.7CVSS7.2AI score0.00159EPSS

Exploits1References1Affected Software1