CVE-2024-39023

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via admin/infodeal.php?mudi=add&nohrefStr=close...

CVE-2024-39020

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/vpsApiDatadeal.php?mudi=rev&nohrefStr=close...

CVE-2024-39019

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/idcProDatadeal.php?mudi=del...

CVE-2024-39023

The idcCMS (Net Titanium IDC Cloud Management Proxy System) version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. The flaw is accessible via the admin/info_deal.php?mudi=add&nohrefStr=close endpoint. This vulnerability allows an attacker to perform unauthorized actions ...

CVE-2024-39019

The idcCMS (Net Titanium IDC Cloud Management Proxy System) version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The flaw exists in the /admin/idcProData_deal.php endpoint, specifically when the mudi parameter is set to del, potentially allowing an attacker to perform unautho...

CVE-2024-39022

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/infoSysdeal.php?mudi=deal...

CVE-2024-39021

The idcCMS (Net Titanium IDC Cloud Management Proxy System) cloud management proxy system, specifically version 1.35 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The flaw exists in the /admin/vpsApiData_deal.php component when the mudi parameter is set to del . This vulnerabilit...

CVE-2024-39020

The Net Titanium Technology idcCMS (Idc Cloud Management Proxy System) version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The flaw exists in the /admin/vpsApiData_deal.php endpoint, specifically when the mudi and nohrefStr parameters are set to rev and close, respectively. ...

CVE-2024-39021

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/vpsApiDatadeal.php?mudi=del...

CVE-2024-39020

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/vpsApiDatadeal.php?mudi=rev&nohrefStr=close...

PT-2024-28333 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in idccms. The vulnerability can be exploited via the "/admin/infoSys deal.php" endpoint, specifically when the mudi parameter is set to deal. This allows...

CVE-2024-39023: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via admin/infodeal.php?mudi=add&nohrefStr=close...

CVE-2024-39020: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/vpsApiDatadeal.php?mudi=rev&nohrefStr=close...

idcCMS Security Breach

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Proxy System is a cloud management proxy system from China's Net Titanium Technology, Inc. A security vulnerability exists in idcCMS version 1.35, which is vulnerable to cross-site request forgery CSRF attacks...

idcCMS Cross-Site Request Forgery Vulnerability (CNVD-2024-33205)

idcCMS Nettie IDC cloud management agent system is a cloud management agent system of Fuzhou Nettie Software Technology Co. A cross-site request forgery vulnerability exists in idcCMS v1.35, which originates from admin/infodeal.php?mudi=rev&nohrefStr=close not adequately verifying whether a reque...

CVE-2024-39022

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/infoSysdeal.php?mudi=deal...

CVE-2024-39019

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/idcProDatadeal.php?mudi=del...

PT-2024-28331 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in idccms via the "/admin/vpsApiData deal.php" endpoint, specifically when the mudi and nohrefStr parameters are set to 'rev' and 'close', respectively...

CVE-2024-39021: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/vpsApiDatadeal.php?mudi=del...

CVE-2024-39019: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/idcProDatadeal.php?mudi=del...