Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-36065 1 Flycms Project 1 Flycms 2025-01-29 8.8 High
Cross Site Request Forgery (CSRF) vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/admin_save.
CVE-2020-19613 1 Flycms Project 1 Flycms 2024-11-21 7.5 High
Server Side Request Forgery (SSRF) vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503.