CVE-2024-46600

MEDIUM

dingfanzu CMS 1.0 - Cross-Site Request Forgery via /admin/doAdminAction.php

Title source: llm

dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/doAdminAction.php?act=delCate&id=31

Core 1

Core References

Exploit, Third Party Advisory

CVSS v3 4.7

EPSS 0.0020

EPSS Percentile 10.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

CWE

CWE-352

Status published

Products (1)

timgreen/dingfanzu_cms 1.0

Published Sep 25, 2024

Tracked Since Feb 18, 2026