CVE-2024-35559

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoMovedeal.php?mudi=rev&nohrefStr=close...

CVE-2024-35553

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoMovedeal.php?mudi=add&nohrefStr=close...

CVE-2024-35552

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoMovedeal.php?mudi=del&dataType=logo&dataTypeCN...

CVE-2024-35552

Concretely, CVE-2024-35552 affects idccms v1.35 with a CSRF in the component /admin/infoMove_deal.php?mudi=del&dataType=logo&dataTypeCN. The PT-2024-26538 entry confirms the CSRF flaw in the idccms admin path, enabling unauthorized actions. Remediation guidance from the connected PT entry recomme...