Vulnerabilities

TI-2024-30339 CVE-2024-45264 · GHSA-7cfc-62qm-phmg

A cross-site request forgery (CSRF) vulnerability in the admin panel in SkySystem…

MEDIUM 41

A cross-site request forgery (CSRF) vulnerability in the admin panel in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to add a new administrator, leading to escalation of privileges.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00507 Published 2024-08-27 No fix listed CWE-352

TI-2024-30340 CVE-2024-45265 · GHSA-3g58-rjqp-pmgh

A SQL injection vulnerability in the poll component in SkySystem Arfa-CMS before 5.1.3124…

MEDIUM 51

A SQL injection vulnerability in the poll component in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to execute arbitrary SQL commands via the psid parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01045 Published 2024-08-26 No fix listed CWE-79

Vulnerabilities

Filters

A cross-site request forgery (CSRF) vulnerability in the admin panel in SkySystem…

A SQL injection vulnerability in the poll component in SkySystem Arfa-CMS before 5.1.3124…