Search vulnerabilities

Results 8

Export CSV
CVE-2024-50650

python_book V1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by modifying the ID parameter.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
CVE-2024-50966

dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=addAdmin.

CVSS 3.1 · 9.3 Critical EPSS < 1% KEV · Not listed
Products
CVE-2024-48758

dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the addPro parameter of the component doAdminAction.php which allows a remote attacker to execute arbitrary code

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Products