Threats affecting pkg:github/da271133/cms2

27 threats

Severity	CVSS	Signals	Threat	Source	Published
High	8.8	EPSS 0.3%	CVE-2024-39158cms2 · Cross-Site Request Forgery (CSRF) High8.8EPSS 0.3%2024-06-27CVE Database V5CVE-2024-39158 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/userSys_deal.php?mudi=infoSet. EPSS 0.3%Vulnerability CWE-352	CVE Database V5	2024-06-27
Low	3.8	EPSS 0.2%	CVE-2024-39157cms2 · Cross-Site Request Forgery (CSRF) Low3.8EPSS 0.2%2024-06-27CVE Database V5CVE-2024-39157 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ipRecord_deal.php?mudi=del&dataType=&dataID=1. EPSS 0.2%Vulnerability CWE-352	CVE Database V5	2024-06-27
Low	3.8	EPSS 0.2%	CVE-2024-39156cms2 · Cross-Site Request Forgery (CSRF) Low3.8EPSS 0.2%2024-06-27CVE Database V5CVE-2024-39156 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord_deal.php?mudi=add. EPSS 0.2%Vulnerability CWE-352	CVE Database V5	2024-06-27
Medium	6.8	EPSS 0.2%	CVE-2024-39155cms2 · Cross-Site Request Forgery (CSRF) Medium6.8EPSS 0.2%2024-06-27CVE Database V5CVE-2024-39155 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ipRecord_deal.php?mudi=add. EPSS 0.2%Vulnerability CWE-352	CVE Database V5	2024-06-27
High	8.8	EPSS 0.3%	CVE-2024-39154cms2 · Cross-Site Request Forgery (CSRF) High8.8EPSS 0.3%2024-06-27CVE Database V5CVE-2024-39154 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord_deal.php?mudi=del&dataType=word&dataTypeCN. EPSS 0.3%Vulnerability CWE-352	CVE Database V5	2024-06-27
Medium	4.7	EPSS 0.2%	CVE-2024-39153cms2 · Cross-Site Request Forgery (CSRF) Medium4.7EPSS 0.2%2024-06-27CVE Database V5CVE-2024-39153 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/info_deal.php?mudi=del&dataType=news&dataTypeCN. EPSS 0.2%Vulnerability CWE-352	CVE Database V5	2024-06-27
High	8.8	EPSS 0.3%	CVE-2024-22593cms2 · Cross-Site Request Forgery (CSRF) High8.8EPSS 0.3%2024-01-18CVE Database V5CVE-2024-22593 FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/add_group_save EPSS 0.3%Vulnerability CWE-352	CVE Database V5	2024-01-18

Page 2 of 2