flycms project kayıtları

flycms project üreticisine ait 19 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

19 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
35İzleyin	CVE-2024-22699İstismar yok	FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/update_group_save.flycms project · flycms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,4	18 Oca 2024
35İzleyin	CVE-2020-36065İstismar yok	Cross Site Request Forgery (CSRF) vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/admiflycms project · flycms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,3	8 May 2023
35İzleyin	CVE-2024-22603İstismar yok	FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/links/add_linkflycms project · flycms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,3	18 Oca 2024
35İzleyin	CVE-2024-22592İstismar yok	FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_updateflycms project · flycms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,3	18 Oca 2024
35İzleyin	CVE-2024-22593İstismar yok	FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/add_group_saveflycms project · flycms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,3	18 Oca 2024
35İzleyin	CVE-2024-22818İstismar yok	FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerbility via /system/site/filterKeyword_saveflycms project · flycms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,3	18 Oca 2024
35İzleyin	CVE-2024-22817İstismar yok	FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/email/email_conf_updagteflycms project · flycms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,3	18 Oca 2024
35İzleyin	CVE-2024-22819İstismar yok	FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/email/email_templets_update.flycms project · flycms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,3	18 Oca 2024
35İzleyin	CVE-2024-22591İstismar yok	FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_save.flycms project · flycms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,3	18 Oca 2024
35İzleyin	CVE-2023-52072İstismar yok	FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/userconfig_updagte.flycms project · flycms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,3	8 Oca 2024
35İzleyin	CVE-2023-52074İstismar yok	FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component system/site/webconfig_updagte.flycms project · flycms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,3	8 Oca 2024
35İzleyin	CVE-2024-22568İstismar yok	FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/del.flycms project · flycms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,3	18 Oca 2024
35İzleyin	CVE-2023-52073İstismar yok	FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/config_footer_updagte.flycms project · flycms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,3	8 Oca 2024
35İzleyin	CVE-2024-22601İstismar yok	FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/scorerule_saveflycms project · flycms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,2	18 Oca 2024
30İzleyin	CVE-2020-19613İstismar yok	Server Side Request Forgery (SSRF) vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503.flycms project · flycms · CWE-918 Kimlik doğrulamasız SSRF	Yüksek7,5	—	%1,3	1 Nis 2021
29İzleyin	CVE-2024-27694İstismar yok	FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the /system/share/ztree_category_edit.flycms project · flycms · CWE-352 CSRF	Yüksek7,4	—	%0,2	4 Mar 2024
24İzleyin	CVE-2024-21732İstismar yok	FlyCms through abbaa5a allows XSS via the permission management feature.flycms project · flycms · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,4	1 Oca 2024
21İzleyin	CVE-2024-22548İstismar yok	FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the system website settings website name section.flycms project · flycms · CWE-79 XSS	Orta5,4	—	%0,4	18 Oca 2024
21İzleyin	CVE-2024-22549İstismar yok	FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the email settings of the website settings section.flycms project · flycms · CWE-79 XSS	Orta5,4	—	%0,4	18 Oca 2024

CVE-2024-22699
35İzleyin
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/update_group_save.
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
flycms project · flycms18 Oca 2024
CVE-2020-36065
35İzleyin
Cross Site Request Forgery (CSRF) vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/admi
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
flycms project · flycms8 May 2023
CVE-2024-22603
35İzleyin
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/links/add_link
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
flycms project · flycms18 Oca 2024
CVE-2024-22592
35İzleyin
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_update
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
flycms project · flycms18 Oca 2024
CVE-2024-22593
35İzleyin
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/add_group_save
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
flycms project · flycms18 Oca 2024
CVE-2024-22818
35İzleyin
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerbility via /system/site/filterKeyword_save
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
flycms project · flycms18 Oca 2024
CVE-2024-22817
35İzleyin
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/email/email_conf_updagte
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
flycms project · flycms18 Oca 2024
CVE-2024-22819
35İzleyin
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/email/email_templets_update.
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
flycms project · flycms18 Oca 2024
CVE-2024-22591
35İzleyin
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_save.
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
flycms project · flycms18 Oca 2024
CVE-2023-52072
35İzleyin
FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/userconfig_updagte.
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
flycms project · flycms8 Oca 2024
CVE-2023-52074
35İzleyin
FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component system/site/webconfig_updagte.
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
flycms project · flycms8 Oca 2024
CVE-2024-22568
35İzleyin
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/del.
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
flycms project · flycms18 Oca 2024
CVE-2023-52073
35İzleyin
FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/config_footer_updagte.
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
flycms project · flycms8 Oca 2024
CVE-2024-22601
35İzleyin
FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/scorerule_save
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
flycms project · flycms18 Oca 2024
CVE-2020-19613
30İzleyin
Server Side Request Forgery (SSRF) vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503.
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- SSRF
flycms project · flycms1 Nis 2021
CVE-2024-27694
29İzleyin
FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the /system/share/ztree_category_edit.
YüksekCVSS 7,4İstismar yokEPSS %0
- CSRF
flycms project · flycms4 Mar 2024
CVE-2024-21732
24İzleyin
FlyCms through abbaa5a allows XSS via the permission management feature.
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
flycms project · flycms1 Oca 2024
CVE-2024-22548
21İzleyin
FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the system website settings website name section.
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
flycms project · flycms18 Oca 2024
CVE-2024-22549
21İzleyin
FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the email settings of the website settings section.
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
flycms project · flycms18 Oca 2024