Vendors / Timgreen Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 1
Exploited now Timgreen records in CISA KEV No Timgreen vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 61
dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/doAdminAction.php?act=editAdmin&id=17
CVSS 3.1 MEDIUM 6.3· Network · No auth · User interaction · EPSS 0.00188 · Published 2024-10-28 · No fix listed CWE-352
Priority MEDIUM 61
dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=delAdmin&id=17
CVSS 3.1 MEDIUM 6.3· Network · No auth · User interaction · EPSS 0.00192 · Published 2024-10-28 · No fix listed CWE-352
Priority MEDIUM 61
dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/doAdminAction.php?act=addCate
CVSS 3.1 MEDIUM 6.3· Network · No auth · User interaction · EPSS 0.00189 · Published 2024-09-25 · No fix listed CWE-352
Priority MEDIUM 60
dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the addPro parameter of the component doAdminAction.php which allows a remote attacker to execute arbitrary code
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00279 · Published 2024-10-16 · No fix listed CWE-352
Priority MEDIUM 55
dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/doAdminAction.php?act=delCate&id=31
CVSS 3.1 MEDIUM 4.7· Network · High privileges · No interaction · EPSS 0.00212 · Published 2024-09-25 · No fix listed CWE-352
Priority MEDIUM 42
dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=addAdmin.
CVSS 3.1 CRITICAL 9.3· Network · No auth · User interaction · EPSS 0.00273 · Published 2024-11-08 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
2 1 5 0 0
THREATIST.IORead the docs