CMS
Dingfanzu · 7 CVEs
CVE-2025-1544
MEDIUM
dingfanzu CMS loadShopInfo.php sql injection
Feb 21, 2025
CVE-2024-50966
CRITICAL
dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction…
Nov 8, 2024
CVE-2024-48758
MEDIUM
dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the addPro parameter of the compon…
Oct 16, 2024
CVE-2024-9294
MEDIUM
dingfanzu CMS saveNewPwd.php sql injection
Sep 27, 2024
CVE-2024-46485
MEDIUM
dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/doAdminAction.php?act=addCate
Sep 25, 2024
CVE-2024-8303
MEDIUM
dingfanzu CMS getBasicInfo.php sql injection
Aug 29, 2024
CVE-2024-8302
MEDIUM
dingfanzu CMS chpwd.php sql injection
Aug 29, 2024
CVE-2024-8301
MEDIUM
dingfanzu CMS checkin.php sql injection
Aug 29, 2024
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2025-1544 | dingfanzu CMS loadShopInfo.php sql injection | MEDIUM | 0.31% | Feb 21, 2025 |
| CVE-2024-50966 | dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=addAdmin. | CRITICAL | 0.26% | Nov 8, 2024 |
| CVE-2024-48758 | dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the addPro parameter of the component doAdminAction.php which allows a rem… | MEDIUM | 0.28% | Oct 16, 2024 |
| CVE-2024-9294 | dingfanzu CMS saveNewPwd.php sql injection | MEDIUM | 0.32% | Sep 27, 2024 |
| CVE-2024-46485 | dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/doAdminAction.php?act=addCate | MEDIUM | 0.19% | Sep 25, 2024 |
| CVE-2024-8303 | dingfanzu CMS getBasicInfo.php sql injection | MEDIUM | 0.40% | Aug 29, 2024 |
| CVE-2024-8302 | dingfanzu CMS chpwd.php sql injection | MEDIUM | 0.75% | Aug 29, 2024 |
| CVE-2024-8301 | dingfanzu CMS checkin.php sql injection | MEDIUM | 0.76% | Aug 29, 2024 |
Showing 1 to 7 of 7 CVEs