Search vulnerabilities

Results 6

Export CSV
CVE-2024-50966

dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=addAdmin.

CVSS 3.1 · 9.3 Critical EPSS < 1% KEV · Not listed
Products
CVE-2024-48758

dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the addPro parameter of the component doAdminAction.php which allows a remote attacker to execute arbitrary code

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Products