Lucene search
+L

496 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•3 views

CVE-2024-35009: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/shareswitch.php?mudi=switch&dataType=&fieldName=state&fieldName2=state&tabName=banner&dataID=6...

8.8CVSS5.7AI score0.00301EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/05/14 12:00 a.m.•29 views

PT-2024-26291 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in the component "/admin/infoType deal.php" with parameters mudi and nohrefStr. This allows for unauthorized requests. Recommendations: For idccms version...

5.4CVSS6.7AI score0.00192EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/05/14 12:00 a.m.•16 views

PT-2024-26288 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF in the component /admin/share switch.php. This component is vulnerable due to the presence of certain parameters, including mudi, dataType, fieldName,...

8.8CVSS6.8AI score0.00301EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•2 views

CVE-2024-35012: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoTypedeal.php?mudi=add&nohrefStr=close...

6.3CVSS5.7AI score0.00226EPSS
SaveExploits1References1
OSV
OSV
•added 2024/05/06 1:15 p.m.•14 views

CVE-2024-33829

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/readDeal.php?mudi=updateWebCache...

5.4CVSS5.8AI score0.0021EPSS
SaveExploits1References1
NVD
NVD
•added 2024/05/06 1:15 p.m.•120 views

CVE-2024-33829

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/readDeal.php?mudi=updateWebCache...

5.4CVSS7.1AI score0.0021EPSS
SaveExploits1References1
OSV
OSV
•added 2024/05/06 1:15 p.m.•15 views

CVE-2024-33830

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/readDeal.php?mudi=clearWebCache...

8.1CVSS5.8AI score0.00299EPSS
SaveExploits1References1
NVD
NVD
•added 2024/05/06 1:15 p.m.•22 views

CVE-2024-33830

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/readDeal.php?mudi=clearWebCache...

8.1CVSS7.1AI score0.00299EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/05/06 12:00 a.m.•15 views

CVE-2024-33830

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/readDeal.php?mudi=clearWebCache...

7.5AI score0.00299EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/06 12:00 a.m.•3 views

CVE-2024-33829: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/readDeal.php?mudi=updateWebCache...

5.4CVSS5.7AI score0.0021EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/05/06 12:00 a.m.•14 views

PT-2024-25501 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in the /admin/readDeal.php component, specifically via the mudi parameter set to clearWebCache. This allows for unauthorized actions to be performed on...

8.1CVSS6.7AI score0.00299EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/05/06 12:00 a.m.•43 views

CVE-2024-33830

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/readDeal.php?mudi=clearWebCache...

7.3AI score0.00299EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/06 12:00 a.m.•4 views

CVE-2024-33830: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/readDeal.php?mudi=clearWebCache...

8.1CVSS5.7AI score0.00299EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/05/06 12:00 a.m.•15 views

PT-2024-25500 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in the component /admin/readDeal.php?mudi=updateWebCache. This issue allows for potential exploitation. Recommendations: For idccms version 1.35, consider...

5.4CVSS7.1AI score0.0021EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2024/05/06 12:00 a.m.•21 views

CVE-2024-33829

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/readDeal.php?mudi=updateWebCache...

7.5AI score0.0021EPSS
SaveExploits1References1
CVE
CVE
•added 2024/05/06 12:00 a.m.•79 views

CVE-2024-33830

The idccms v1.35 cloud management agent system is vulnerable to a Cross-Site Request Forgery (CSRF) flaw in the /admin/readDeal.php component. Specifically, an attacker can exploit the mudi parameter when set to clearWebCache to perform unauthorized actions on behalf of a user. As a temporary wor...

8.1CVSS7.4AI score0.00299EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2024/05/06 12:00 a.m.•10 views

idccms 安全漏洞

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology Net Titanium Technology. A security vulnerability exists in idccms v1.35, which originates from admin/readDeal.php containing a cross-site request...

5.4CVSS6.8AI score0.0021EPSS
SaveExploits1References2
NVD
NVD
•added 2024/04/25 2:15 p.m.•23 views

CVE-2024-4172

A vulnerability classified as problematic was found in idcCMS 1.35. Affected by this vulnerability is an unknown functionality of the file /admin/admincl.php?mudi=revPwd. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to t...

5CVSS4.7AI score0.00434EPSS
SaveExploits1References4
OSV
OSV
•added 2024/04/25 2:15 p.m.•14 views

CVE-2024-4172

A vulnerability classified as problematic was found in idcCMS 1.35. Affected by this vulnerability is an unknown functionality of the file /admin/admincl.php?mudi=revPwd. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to t...

4.3CVSS4.8AI score0.00434EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/04/25 2:00 p.m.•40 views

CVE-2024-4172 idcCMS cross-site request forgery

A vulnerability classified as problematic was found in idcCMS 1.35. Affected by this vulnerability is an unknown functionality of the file /admin/admincl.php?mudi=revPwd. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to t...

5CVSS5AI score0.00434EPSS
SaveExploits1References4
Rows per page
Query Builder