dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=addAdmin.
Search vulnerabilities
CVE-2024-50966
CVSS 3.1 · 9.3 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2024-48191
dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=delAdmin&id=17
CVSS 3.1 · 6.3 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2024-48291
dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/doAdminAction.php?act=editAdmin&id=17
CVSS 3.1 · 6.3 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2024-48758
dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the addPro parameter of the component doAdminAction.php which allows a remote attacker to execute arbitrary code
CVSS 3.1 · 6.1 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2024-46485
dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/doAdminAction.php?act=addCate
CVSS 3.1 · 6.3 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2024-46600
dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/doAdminAction.php?act=delCate&id=31
CVSS 3.1 · 4.7 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
Page 1 of 1.