idcCMS Security Breach

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system by Net Titanium Technology China. A security vulnerability exists in idcCMS v1.35, which originates from a cross-site request forgery vulnerability in the...

PT-2024-28765 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This vulnerability can be exploited via the "/admin/userScore deal.php" endpoint, specifically when the mudi parameter is set to "rev"...

CVE-2024-40039

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userGroupdeal.php?mudi=del...

CVE-2024-40038

The idccms v1.35 cloud management proxy system is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. The flaw exists in the /admin/userScore_deal.php endpoint, specifically when the mudi parameter is set to rev . An attacker can trick an authenticated user into performing unintended...

CVE-2024-40036

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userGroupdeal.php?mudi=add&nohrefStr=close...

CVE-2024-40036

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userGroupdeal.php?mudi=add&nohrefStr=close...

CVE-2024-40034

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userLeveldeal.php?mudi=del...

CVE-2024-40035

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userLeveldeal.php?mudi=add...

CVE-2024-40037

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userScoredeal.php?mudi=del...

idcCMS Security Breach

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Proxy System is a cloud management proxy system from China's Net Titanium Technology Net Titanium Technology. A security vulnerability exists in idcCMS v1.35, which originates from a cross-site request forgery vulnerability in the...

CVE-2024-40035

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userLeveldeal.php?mudi=add...

CVE-2024-40038

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userScoredeal.php?mudi=rev...

CVE-2024-40034: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userLeveldeal.php?mudi=del...

PT-2024-28766 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was found in idccms. The issue is related to the "/admin/userGroup deal.php" API endpoint, specifically with the mudi variable when set to "del". This allows for...

CVE-2024-40035: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userLeveldeal.php?mudi=add...

CVE-2024-40036: Improper Neutralization of Input During Web Page Generation

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userGroupdeal.php?mudi=add&nohrefStr=close...

CVE-2024-40034

CVE-2024-40034 : A Cross-Site Request Forgery (CSRF) vulnerability affects idccms v1.35, exploitable via the /admin/userLevel_deal.php?mudi=del endpoint. The issue enables unauthorized actions without authentication or with user interaction. CVSS v3.1 base metrics indicate high impact to confiden...

CVE-2024-40036

The idccms v1.35 cloud management agent system (Net Titanium Technology) is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/userGroup_deal.php endpoint when using the mudi and nohrefStr parameters, which can allow an attacker to perform unauthorized actions on be...

CVE-2024-40035

The idccms v1.35 cloud management agent system, developed by Net Titanium Technology, is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/userLevel_deal.php?mudi=add endpoint, allowing attackers to submit malicious requests without the user's knowledge or consent....

CVE-2024-40037

CVE-2024-40037 affects idccms v1.35, with a CSRF flaw in the admin action endpoint. The vulnerability is exposed via /admin/userScore_deal.php?mudi=del, allowing unauthorized state-changing requests without the user’s intent. The consolidated sources indicate a CSRF risk with a base CVSS v3.1 sco...