← Database

CVE-2024-48758

MEDIUM CVSS: 6.1 Published: 2024-10-16 Modified: 2026-06-17

Description

dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the addPro parameter of the component doAdminAction.php which allows a remote attacker to execute arbitrary code

Affected Platforms

Timgreen Dingfanzu Cms

Weakness Type

CWE-352

References