Vulnerabilities
8 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2024-50649 +1 in the same advisory: …50650 | The user avatar upload function in python_book V1.0 has an arbitrary file upload vulnerability. The user avatar upload function in python_book V1.0 has an arbitrary file upload vulnerability. NVD description · AI analysis pending | 9.8 group max | <1% | PoC ×2 |
| — | |
| CVE-2024-50966 | dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=addAdmin. dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=addAdmin. NVD description · AI analysis pending | 9.3 | <1% | PoC |
| — | |
| CVE-2024-48191 +1 in the same advisory: …48291 | dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=delAdmin&id=17 dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=delAdmin&id=17 NVD description · AI analysis pending | 6.3 | <1% | PoC |
| — | |
| CVE-2024-48758 | dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the addPro parameter of the component doAdminAction.php which allows a remo dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the addPro parameter of the component doAdminAction.php which allows a remote attacker to execute arbitrary code NVD description · AI analysis pending | 6.1 | <1% | PoC |
| — | |
| CVE-2024-46485 +1 in the same advisory: …46600 | dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/doAdminAction.php?act=addCate dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/doAdminAction.php?act=addCate NVD description · AI analysis pending | 6.3 group max | <1% | PoC |
| — |