431 matches found
CVE-2024-40329
CVE-2024-40329 affects idccms v1.35, with a Cross-Site Request Forgery (CSRF) vulnerability exploitable via /admin/softBak_deal.php?mudi=backup. The vulnerability is confirmed across multiple sources (NVD, Red Hat, CNVD, CVE listing) with CVSS v3.1 base metrics: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:...
CVE-2024-40332
CVE-2024-40332 concerns idccms v1.35, which is affected by a CSRF flaw exploitable via the endpoint /admin/moneyRecord_deal.php?mudi=delRecord. The available documents consistently describe a CSRF vulnerability enabling unauthorized actions on the system, with no explicit exploit code or in‑the‑w...
CVE-2024-40328
CVE-2024-40328 affects idccms v1.35 and is a Cross-Site Request Forgery (CSRF) vulnerability exposed via /admin/memberOnline_deal.php?mudi=del&dataType=&dataID=6. Public sources (NVD, Red Hat, CNNVD, CVE list, etc.) describe the issue and confirm the affected product, with CVSSv3.1 base score 6.3...
CVE-2024-40336
CVE-2024-40336 affects idccms v1.35 and is a Cross Site Scripting (XSS) vulnerability in the Image Advertising Management component. The available documents identify the affected product (idccms v1.35) and the vulnerable feature (Image Advertising Management) but do not provide details on root ca...
CVE-2024-40334
idccms v1.35 contains a Cross-Site Request Forgery (CSRF) vulnerability affecting the endpoint /admin/serverFile_deal.php?mudi=upFileDel&dataID=3. The issue stems from CSRF in the admin file-deletion flow, with CVSS 3.1 base metrics indicating HIGH impact on confidentiality, integrity, and availa...
CVE-2024-40331
idccms v1.35 is affected by a Cross-Site Request Forgery (CSRF) in the admin function via /admin/dbBakMySQL_deal.php?mudi=backup. CVSS 3.1 base score 8.8 (High): Network, LOW attack complexity, NONE privileges, user interaction required; impact to confidentiality, integrity, and availability is H...
CVE-2024-40334
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/serverFiledeal.php?mudi=upFileDel&dataID=3...
CVE-2024-40332
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/moneyRecorddeal.php?mudi=delRecord...
CVE-2024-40329
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/softBakdeal.php?mudi=backup...
CVE-2024-40336
idccms v1.35 is vulnerable to Cross Site Scripting XSS within the 'Image Advertising Management.'...
CVE-2024-40332
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/moneyRecorddeal.php?mudi=delRecord...
PT-2024-28813 · Idccms · Idccms
Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in idccms. The vulnerability can be exploited via the "/admin/serverFile deal.php" endpoint, specifically when the mudi parameter is set to "upFileDel" an...
CVE-2024-40334
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/serverFiledeal.php?mudi=upFileDel&dataID=3...
CVE-2024-40333
idccms v1.35 contains a Cross-Site Request Forgery (CSRF) vulnerability accessible through /admin/softBak_deal.php?mudi=del&dataID=2. The CVE entry notes a high-severity issue (CVSS v3.1: 8.8) with network attack vector, low complexity, no privileges required, and user interaction needed, leading...
CVE-2024-40039
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userGroupdeal.php?mudi=del...
CVE-2024-40038
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userScoredeal.php?mudi=rev...
CVE-2024-40034
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userLeveldeal.php?mudi=del...
CVE-2024-40036
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userGroupdeal.php?mudi=add&nohrefStr=close...
