CVE-2024-35560

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/cadeal.php?mudi=del&dataType=&dataTypeCN...

CVE-2024-35560

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/cadeal.php?mudi=del&dataType=&dataTypeCN...

CVE-2024-35560

The idccms v1.35 cloud management agent system by Net Titanium Technology contains a Cross-Site Request Forgery (CSRF) vulnerability. The flaw exists in the /admin/ca_deal.php component, specifically when the mudi=del parameter is used with empty dataType and dataTypeCN variables. This vulnerabil...

CVE-2024-35559

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoMovedeal.php?mudi=rev&nohrefStr=close...

CVE-2024-35559

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoMovedeal.php?mudi=rev&nohrefStr=close...

CVE-2024-35559

The idccms v1.35 cloud management agent system (by Net Titanium Technology) is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/infoMove_deal.php component, specifically involving the mudi and nohrefStr parameters. This vulnerability could allow an attacker to per...

CVE-2024-35558

The idccms v1.35 (Net Titanium IDC Cloud Management Agent System) contains a Cross-Site Request Forgery (CSRF) vulnerability in the /admin/ca_deal.php component. This issue specifically involves the mudi and nohrefStr parameters, which can be exploited to perform unauthorized requests . While no ...

CVE-2024-35558

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/cadeal.php?mudi=rev&nohrefStr=close...

CVE-2024-35558

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/cadeal.php?mudi=rev&nohrefStr=close...

CVE-2024-35557

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/vpsApideal.php?mudi=rev&nohrefStr=close...

CVE-2024-35557

The idccms v1.35 cloud management agent system, developed by Net Titanium Technology, is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the component /admin/vpsApi_deal.php?mudi=rev&nohrefStr=close , which can allow an attacker to perform unauthorized requests on behalf of...

CVE-2024-35557

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/vpsApideal.php?mudi=rev&nohrefStr=close...

CVE-2024-35555

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/shareswitch.php?mudi=switch&dataType=newsWeb&fieldName=state&fieldName2=state&tabName=infoWeb&dataID=40...

CVE-2024-35555

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/shareswitch.php?mudi=switch&dataType=newsWeb&fieldName=state&fieldName2=state&tabName=infoWeb&dataID=40...

CVE-2024-35556

idccms v1.35 , a cloud management agent system from Net Titanium Technology, contains a Cross-Site Request Forgery (CSRF) vulnerability. The flaw exists in the /admin/vpsSys_deal.php component when the mudi parameter is set to infoSet . This vulnerability allows for unauthorized requests to be ma...

CVE-2024-35556

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/vpsSysdeal.php?mudi=infoSet...

CVE-2024-35556

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/vpsSysdeal.php?mudi=infoSet...

CVE-2024-35554

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoWebdeal.php?mudi=del&dataType=newsWeb&dataTypeCN...

CVE-2024-35554

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoWebdeal.php?mudi=del&dataType=newsWeb&dataTypeCN...

CVE-2024-35554

The idcCMS (Net Titanium IDC Cloud Management Agent System) version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/infoWeb_deal.php component, specifically involving the mudi , dataType , and dataTypeCN parameters. An attacker could leverage this vulnera...