Advisories · Technology
sunkaifei FlyCms.
Every CVE that names sunkaifei FlyCms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · CVSS 9+
FlyCms through commit edfdf724 Default Super Administrator Credentials
- sunkaifei FlyCms
- CWE-1392
- CVSS 5.3 Medium
FlyCms through commit edfdf724 Mass Assignment via /ucenter/account_update
- sunkaifei FlyCms
- Broken access control
- CVSS 5.3 Medium
FlyCms through commit edfdf724 Missing Authorization via Action Counter Endpoint
- sunkaifei FlyCms
- Broken access control
- CVSS 5.3 Medium
sunkaifei FlyCMS User Login UserController.java userLogin cross site scripting
- sunkaifei FlyCMS
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
sunkaifei FlyCMS Admin Login IndexAdminController.java cross site scripting
- sunkaifei FlyCMS
- Cross-site scripting (XSS)
- Code injection