PT-2024-28812

Name of the Vulnerable Software and Affected Versions idccms version 1.35 Description A Cross-Site Request Forgery CSRF issue was discovered in idccms. The issue is related to the API endpoint "/admin/softBak deal.php" with parameters mudi and dataID. This allows for potential unauthorized action...

PT-2024-28808

Name of the Vulnerable Software and Affected Versions idccms version 1.35 Description The issue is a Cross-Site Request Forgery CSRF vulnerability. It can be exploited via the "/admin/softBak deal.php" API endpoint, specifically when the mudi parameter is set to "backup". This allows an attacker ...