430 matches found
CVE-2024-35560
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/cadeal.php?mudi=del&dataType=&dataTypeCN...
CVE-2024-35560
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/cadeal.php?mudi=del&dataType=&dataTypeCN...
CVE-2024-35559
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoMovedeal.php?mudi=rev&nohrefStr=close...
CVE-2024-35559
idccms v1.35 contains a Cross-Site Request Forgery (CSRF) vulnerability in the admin/infoMove_deal.php endpoint (parameters mudi and nohrefStr=close). CVSS v3.1 base score 8.8 (HIGH): Network attack vector, no privileges required, user interaction required, and with high confidentiality, integrit...
CVE-2024-35559
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoMovedeal.php?mudi=rev&nohrefStr=close...
CVE-2024-35558
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/cadeal.php?mudi=rev&nohrefStr=close...
CVE-2024-35558
CVE-2024-35558: idccms v1.35 is reported to contain a Cross-Site Request Forgery (CSRF) in the admin action at /admin/ca_deal.php?mudi=rev&nohrefStr=close. The vulnerability enables unauthorized state-changing requests from an attacker-trusted user session, consistent with a HIGH-severity CVSS 3....
CVE-2024-35558
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/cadeal.php?mudi=rev&nohrefStr=close...
CVE-2024-35557
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/vpsApideal.php?mudi=rev&nohrefStr=close...
CVE-2024-35557
CVE-2024-35557 affects idccms v1.35, with a CSRF vulnerability in the admin endpoint /admin/vpsApi_deal.php?mudi=rev&nohrefStr=close. The root cause is a cross-site request forgery in the component handling the vpsApi_deal action, potentially enabling unauthorized actions on behalf of an authenti...
CVE-2024-35557
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/vpsApideal.php?mudi=rev&nohrefStr=close...
CVE-2024-35555
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/shareswitch.php?mudi=switch&dataType=newsWeb&fieldName=state&fieldName2=state&tabName=infoWeb&dataID=40...
CVE-2024-35555
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/shareswitch.php?mudi=switch&dataType=newsWeb&fieldName=state&fieldName2=state&tabName=infoWeb&dataID=40...
CVE-2024-35556
CVE-2024-35556 affects idccms v1.35. The vulnerability is a Cross-Site Request Forgery (CSRF) in the component /admin/vpsSys_deal.php?mudi=infoSet. This is the underlying cause: unauthorized requests may be performed via the mudi parameter. CVSS v3.1 base score 8.8 (High) with network attack vect...
CVE-2024-35556
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/vpsSysdeal.php?mudi=infoSet...
CVE-2024-35556
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/vpsSysdeal.php?mudi=infoSet...
CVE-2024-35554
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoWebdeal.php?mudi=del&dataType=newsWeb&dataTypeCN...
CVE-2024-35554
idccms v1.35 is affected by a Cross-Site Request Forgery (CSRF) in the admin component /admin/infoWeb_deal.php?mudi=del&dataType=newsWeb&dataTypeCN. The underlying issue involves CSRF in the /admin/infoWeb_deal.php path with parameters mudi, dataType, and dataTypeCN that enables unauthorized acti...