li-yu320

3 exploits Active since Dec 2023
CVE-2023-49372 WRITEUP HIGH WORKING POC
JFinalCMS 5.0.0 - Cross-Site Request Forgery via /admin/slide/save
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/slide/save.
CVSS 8.8
CVE-2023-49373 WRITEUP HIGH WORKING POC
JFinalCMS 5.0.0 - Cross-Site Request Forgery via Broadcast Image Deletion Endpoint
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/slide/delete.
CVSS 8.8
CVE-2023-49374 WRITEUP HIGH WORKING POC
JFinalCMS 5.0.0 - Cross-Site Request Forgery via Slide Update Endpoint
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/slide/update.
CVSS 8.8