CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2024-22603 | 高危8.8 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/links/add_link | 18/01/2024 |
| CVE-2024-22601 | 高危8.8 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/scorerule_save | 18/01/2024 |
| CVE-2024-22699 | 高危8.8 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/update_group_save. | 18/01/2024 |
| CVE-2024-22593 | 高危8.8 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/add_group_save | 18/01/2024 |
| CVE-2024-22592 | 高危8.8 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_update | 18/01/2024 |
| CVE-2024-22591 | 高危8.8 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_save. | 18/01/2024 |
| CVE-2024-22568 | 高危8.8 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/del. | 18/01/2024 |
| CVE-2024-22549 | 中危5.4 | FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the email settings of the website settings section. | 18/01/2024 |
| CVE-2024-22548 | 中危5.4 | FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the system website settings website name section. | 18/01/2024 |
| CVE-2023-52074 | 高危8.8 | FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component system/site/webconfig_updagte. | 08/01/2024 |
| CVE-2023-52073 | 高危8.8 | FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/config_footer_updagte. | 08/01/2024 |
| CVE-2023-52072 | 高危8.8 | FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/userconfig_updagte. | 08/01/2024 |
| CVE-2024-21732 | 中危6.1 | FlyCms through abbaa5a allows XSS via the permission management feature. | 01/01/2024 |
| CVE-2020-36065 | 高危8.8 | Cross Site Request Forgery (CSRF) vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/admin_save. | 08/05/2023 |
| CVE-2020-19613 | 高危7.5 | Server Side Request Forgery (SSRF) vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503. | 01/04/2021 |