Lucene search
+L

9 matches found

CNNVD
CNNVD
•added 2024/01/18 12:00 a.m.•17 views

FlyCms Security Vulnerability

sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site builder . FlyCms security vulnerabilities , the vulnerability stems from /system/site/filterKeywordsave location cross-site request...

8.8CVSS6.8AI score0.00321EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/18 12:00 a.m.•3 views

CVE-2024-22818: Cross-Site Request Forgery (CSRF)

FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerbility via /system/site/filterKeywordsave...

8.8CVSS7.9AI score0.00321EPSS
SaveExploits1References3
OSV
OSV
•added 2024/01/08 10:15 p.m.•15 views

CVE-2023-52072

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/site/userconfigupdagte...

8.8CVSS5.8AI score0.00286EPSS
SaveExploits1References1
OSV
OSV
•added 2024/01/08 10:15 p.m.•15 views

CVE-2023-52073

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/site/configfooterupdagte...

8.8CVSS7.3AI score0.00286EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/01/08 12:00 a.m.•13 views

PT-2024-14386 · Flycms · Flycms

Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is related to a Cross-Site Request Forgery CSRF in the component "/system/site/config footer updagte". This allows for unauthorized actions to be performed on behalf of a user. Recommendations: For...

8.8CVSS8.6AI score0.00286EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/08 12:00 a.m.•5 views

CVE-2023-52072: Cross-Site Request Forgery (CSRF)

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/site/userconfigupdagte...

8.8CVSS7.7AI score0.00286EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/08 12:00 a.m.•3 views

CVE-2023-52074: Cross-Site Request Forgery (CSRF)

FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component system/site/webconfigupdagte...

8.8CVSS7.7AI score0.00286EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/01/08 12:00 a.m.•13 views

FlyCms Cross-Site Request Forgery Vulnerability

sunkaifei FlyCms is sunkaifei open source application . A similar to Zhihu to Q&A based on the fully open source JAVA language development of social networking site building program . FlyCms v1.0 version of the existence of cross-site request forgery vulnerability , the vulnerability stems from t...

8.8CVSS6.7AI score0.00286EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/09/15 12:00 a.m.•6 views

PT-2018-13875

Name of the Vulnerable Software and Affected Versions UNL-CMS version 7.59 Description An issue was discovered that allows a CSRF attack to update website settings via the "/admin/config/system/site-information" API endpoint. Recommendations For UNL-CMS version 7.59, update the software to a...

6.5CVSS0.00506EPSS
SaveExploits1References3
Rows per page
Query Builder