İçeriğe atla
Noroxi

flusity kayıtları

flusity üreticisine ait 28 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
9
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 23
  2. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

28 kayıt
  • CVE-2024-31666
    40Planlayın

    An issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via a crafted script to the edit_addon_post.php component.

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    flusity · flusity22 Nis 2024

  • CVE-2024-25502
    39İzleyin

    Directory Traversal vulnerability in flusity CMS v.2.4 allows a remote attacker to execute arbitrary code and obtain sensitive information v

    KritikCVSS 9,8İstismar yokEPSS %1

    flusity · flusity15 Şub 2024

  • CVE-2024-32418
    39İzleyin

    An issue in flusity CMS v2.33 allows a remote attacker to execute arbitrary code via the add_addon.php component.

    KritikCVSS 9,8İstismar yokEPSS %1

    flusity · flusity21 Nis 2024

  • CVE-2023-5812
    35İzleyin

    flusity CMS upload.php handleFileUpload unrestricted upload

    YüksekCVSS 8,8İstismar yokEPSS %1

    flusity · flusity26 Eki 2023

  • CVE-2024-24524
    35İzleyin

    Cross Site Request Forgery (CSRF) vulnerability in flusity-CMS v.2.33, allows remote attackers to execute arbitrary code via the add_menu.ph

    YüksekCVSS 8,8İstismar yokEPSS %1

    flusity · flusity2 Şub 2024

  • CVE-2024-24470
    35İzleyin

    Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the update_post.php co

    YüksekCVSS 8,8İstismar yokEPSS %1

    flusity · flusity2 Şub 2024

  • CVE-2024-24469
    35İzleyin

    Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the delete_post .php.

    YüksekCVSS 8,8İstismar yokEPSS %1

    flusity · flusity5 Şub 2024

  • CVE-2024-24468
    35İzleyin

    Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the add_customblock.ph

    YüksekCVSS 8,8İstismar yokEPSS %0

    flusity · flusity5 Şub 2024

  • CVE-2024-25419
    35İzleyin

    flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/update_menu.php.

    YüksekCVSS 8,8İstismar yokEPSS %0

    flusity · flusity11 Şub 2024

  • CVE-2024-25418
    35İzleyin

    flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/delete_menu.php.

    YüksekCVSS 8,8İstismar yokEPSS %0

    flusity · flusity11 Şub 2024

  • CVE-2024-26352
    35İzleyin

    flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/add_places.php

    YüksekCVSS 8,8İstismar yokEPSS %0

    flusity · flusity22 Şub 2024

  • CVE-2024-26350
    35İzleyin

    flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/update_contact_form_settings.p

    YüksekCVSS 8,8İstismar yokEPSS %0

    flusity · flusity22 Şub 2024

  • CVE-2024-25417
    35İzleyin

    flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/add_translation.php.

    YüksekCVSS 8,8İstismar yokEPSS %0

    flusity · flusity11 Şub 2024

  • CVE-2024-23094
    35İzleyin

    Flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /cover/addons/info_media_gallery/action/ed

    YüksekCVSS 8,8İstismar yokEPSS %0

    flusity · flusity22 Şub 2024

  • CVE-2024-25410
    26İzleyin

    flusity-CMS 2.33 is vulnerable to Unrestricted Upload of File with Dangerous Type in update_setting.php.

    OrtaCVSS 6,5İstismar yokEPSS %1

    flusity · flusity26 Şub 2024

  • CVE-2024-26491
    24İzleyin

    A cross-site scripting (XSS) vulnerability in the Addon JD Flusity 'Media Gallery with description' module of flusity-CMS v2.33 allows attac

    OrtaCVSS 6,1İstismar yokEPSS %0

    flusity · flusity22 Şub 2024

  • CVE-2024-27757
    24İzleyin

    flusity CMS through 2.45 allows tools/addons_model.php Gallery Name XSS.

    OrtaCVSS 6,1İstismar yokEPSS %0

    flusity · flusity18 Mar 2024

  • CVE-2024-26489
    24İzleyin

    A cross-site scripting (XSS) vulnerability in the Addon JD Flusity 'Social block links' module of flusity-CMS v2.33 allows attackers to exec

    OrtaCVSS 6,1İstismar yokEPSS %0

    flusity · flusity22 Şub 2024

  • CVE-2024-27668
    24İzleyin

    Flusity-CMS v2.33 is affected by: Cross Site Scripting (XSS) in 'Custom Blocks.'

    OrtaCVSS 6,1İstismar yokEPSS %0

    flusity · flusity4 Mar 2024

  • CVE-2024-27680
    24İzleyin

    Flusity-CMS v2.33 is vulnerable to Cross Site Scripting (XSS) in the "Contact form."

    OrtaCVSS 6,1İstismar yokEPSS %0

    flusity · flusity4 Mar 2024

  • CVE-2024-26445
    24İzleyin

    flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/delete_place.php

    OrtaCVSS 6,1İstismar yokEPSS %0

    flusity · flusity22 Şub 2024

  • CVE-2024-26351
    24İzleyin

    flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/update_place.php

    OrtaCVSS 6,1İstismar yokEPSS %0

    flusity · flusity22 Şub 2024

  • CVE-2023-5793
    21İzleyin

    flusity CMS Dashboard customblock.php loadCustomBlocCreateForm cross site scripting

    OrtaCVSS 5,4İstismar yokEPSS %0

    flusity · flusity26 Eki 2023

  • CVE-2024-26490
    21İzleyin

    A cross-site scripting (XSS) vulnerability in the Addon JD Simple module of flusity-CMS v2.33 allows attackers to execute arbitrary web scri

    OrtaCVSS 5,4İstismar yokEPSS %0

    flusity · flusity22 Şub 2024

  • CVE-2023-5811
    19İzleyin

    flusity CMS posts.php loadPostAddForm cross site scripting

    OrtaCVSS 4,8İstismar yokEPSS %1

    flusity · flusity26 Eki 2023