Flycms Project
Flycms Project Flycms: vulnerabilidades y CVE
Flycms Project Flycms tiene 19 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE19
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-27694 | Alta (7.4) | 0.24% | — | 4 mar 2024 | FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the /system/share/ztree_category_edit. |
| CVE-2024-22819 | Alta (8.8) | 0.32% | — | 18 ene 2024 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/email/email_templets_update. |
| CVE-2024-22818 | Alta (8.8) | 0.32% | — | 18 ene 2024 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerbility via /system/site/filterKeyword_save |
| CVE-2024-22817 | Alta (8.8) | 0.32% | — | 18 ene 2024 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/email/email_conf_updagte |
| CVE-2024-22603 | Alta (8.8) | 0.33% | — | 18 ene 2024 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/links/add_link |
| CVE-2024-22601 | Alta (8.8) | 0.24% | — | 18 ene 2024 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/scorerule_save |
| CVE-2024-22699 | Alta (8.8) | 0.35% | — | 18 ene 2024 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/update_group_save. |
| CVE-2024-22593 | Alta (8.8) | 0.32% | — | 18 ene 2024 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/add_group_save |
| CVE-2024-22592 | Alta (8.8) | 0.32% | — | 18 ene 2024 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_update |
| CVE-2024-22591 | Alta (8.8) | 0.32% | — | 18 ene 2024 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_save. |
| CVE-2024-22568 | Alta (8.8) | 0.29% | — | 18 ene 2024 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/del. |
| CVE-2024-22549 | Media (5.4) | 0.38% | — | 18 ene 2024 | FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the email settings of the website settings section. |
| CVE-2024-22548 | Media (5.4) | 0.44% | — | 18 ene 2024 | FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the system website settings website name section. |
| CVE-2023-52074 | Alta (8.8) | 0.29% | — | 8 ene 2024 | FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component system/site/webconfig_updagte. |
| CVE-2023-52073 | Alta (8.8) | 0.29% | — | 8 ene 2024 | FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/config_footer_updagte. |
| CVE-2023-52072 | Alta (8.8) | 0.29% | — | 8 ene 2024 | FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/userconfig_updagte. |
| CVE-2024-21732 | Media (6.1) | 0.43% | — | 1 ene 2024 | FlyCms through abbaa5a allows XSS via the permission management feature. |
| CVE-2020-36065 | Alta (8.8) | 0.34% | — | 8 may 2023 | Cross Site Request Forgery (CSRF) vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/admin_save. |
| CVE-2020-19613 | Alta (7.5) | 1.3% | — | 1 abr 2021 | Server Side Request Forgery (SSRF) vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503. |