2 results (0.001 seconds)
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 1CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 1
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 1CVE-2024-45264
https://notcve.org/view.php?id=CVE-2024-45264
27 Aug 2024 — A cross-site request forgery (CSRF) vulnerability in the admin panel in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to add a new administrator, leading to escalation of privileges. • https://github.com/TheHermione/CVE-2024-45264 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 1CVE-2024-45265
https://notcve.org/view.php?id=CVE-2024-45265
26 Aug 2024 — A SQL injection vulnerability in the poll component in SkySystem Arfa-CMS before 5.1.3124 allows remote attackers to execute arbitrary SQL commands via the psid parameter. • https://github.com/TheHermione/CVE-2024-45265 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •