CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2024-22603 | 높음8.8 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/links/add_link | 18/01/2024 |
| CVE-2024-22601 | 높음8.8 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/scorerule_save | 18/01/2024 |
| CVE-2024-22699 | 높음8.8 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/update_group_save. | 18/01/2024 |
| CVE-2024-22593 | 높음8.8 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/add_group_save | 18/01/2024 |
| CVE-2024-22592 | 높음8.8 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_update | 18/01/2024 |
| CVE-2024-22591 | 높음8.8 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_save. | 18/01/2024 |
| CVE-2024-22568 | 높음8.8 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/del. | 18/01/2024 |
| CVE-2024-22549 | 보통5.4 | FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the email settings of the website settings section. | 18/01/2024 |
| CVE-2024-22548 | 보통5.4 | FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the system website settings website name section. | 18/01/2024 |
| CVE-2023-52074 | 높음8.8 | FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component system/site/webconfig_updagte. | 08/01/2024 |
| CVE-2023-52073 | 높음8.8 | FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/config_footer_updagte. | 08/01/2024 |
| CVE-2023-52072 | 높음8.8 | FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/userconfig_updagte. | 08/01/2024 |
| CVE-2024-21732 | 보통6.1 | FlyCms through abbaa5a allows XSS via the permission management feature. | 01/01/2024 |
| CVE-2020-36065 | 높음8.8 | Cross Site Request Forgery (CSRF) vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/admin_save. | 08/05/2023 |
| CVE-2020-19613 | 높음7.5 | Server Side Request Forgery (SSRF) vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503. | 01/04/2021 |