Timgreen Dingfanzu Cms — known CVE vulnerabilities

Every CVE whose affected-product data names Timgreen Dingfanzu Cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2024-50966 — CVSS 9.3 (critical): dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=addAdmin.
• CVE-2024-46485 — CVSS 6.3 (medium): dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/doAdminAction.php?act=addCate
• CVE-2024-48191 — CVSS 6.3 (medium): dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=delAdmin&id=1…
• CVE-2024-48291 — CVSS 6.3 (medium): dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/doAdminAction.php?act=editAdmin&id=17
• CVE-2024-48758 — CVSS 6.1 (medium): dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the addPro parameter of the component…
• CVE-2024-46600 — CVSS 4.7 (medium): dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/doAdminAction.php?act=delCate&id=31