Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2024-45265

A SQL injection vulnerability in the poll component in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to execute arbitrary SQL commands via the psid parameter.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Skyss Skysystem
Products
Arfa-cms Arfa Cms
CVE-2024-45264

A cross-site request forgery (CSRF) vulnerability in the admin panel in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to add a new administrator, leading to escalation of privileges.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
Skyss Skysystem
Products
Arfa-cms Arfa Cms