227 matches found
CVE-2024-35553
The idccms v1.35 (IDC Cloud Management Agent System) by Net Titanium Technology contains a Cross-Site Request Forgery (CSRF) vulnerability in the component /admin/infoMove_deal.php?mudi=add&nohrefStr=close. This flaw allows an attacker to perform unauthorized requests on behalf of a user. As a te...
CVE-2024-35552
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoMovedeal.php?mudi=del&dataType=logo&dataTypeCN...
CVE-2024-35551
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoWebdeal.php?mudi=add...
CVE-2024-35551
The cloud management agent system idcCMS (idccms) version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the component /admin/infoWeb_deal.php?mudi=add , which allows an attacker to perform malicious requests on behalf of a legitimate user. As a temporary workaroun...
CVE-2024-35551
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoWebdeal.php?mudi=add...
CVE-2024-35550
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoWebdeal.php?mudi=rev...
CVE-2024-35550
The idccms v1.35 cloud management agent system is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. The flaw exists in the /admin/infoWeb_deal.php component, specifically when the mudi parameter is set to rev . This vulnerability allows an attacker to perform unauthorized requests ...
CVE-2024-35557: Cross-Site Request Forgery (CSRF)
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/vpsApideal.php?mudi=rev&nohrefStr=close...
CVE-2024-35560: Cross-Site Request Forgery (CSRF)
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/cadeal.php?mudi=del&dataType=&dataTypeCN...
CVE-2024-35039
idccms V1.35 was discovered to contain a Cross-Site Request Forgery CSRF via admin/tplSysdeal.php?mudi=area...
CVE-2024-34958
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/bannerdeal.php?mudi=add...
CVE-2024-34957
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/sysImagesdeal.php?mudi=infoSet...
CVE-2024-34957
The software idccms version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability within the admin/sysImages_deal.php?mudi=infoSet component. This flaw allows an attacker to perform unauthorized actions on behalf of a user. As a temporary workaround, it is recommended to disable...
CVE-2024-34957
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/sysImagesdeal.php?mudi=infoSet...
CVE-2024-34958
The software idccms version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) via the component admin/banner_deal.php?mudi=add. This vulnerability allows for potential unauthorized actions by an attacker. As a temporary workaround, users should disable access to the admin/banner_deal.php ...
CVE-2024-34958
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/bannerdeal.php?mudi=add...
CVE-2024-35039
idccms V1.35 was discovered to contain a Cross-Site Request Forgery CSRF via admin/tplSysdeal.php?mudi=area...
CVE-2024-35039
The idcCMS (Net Titanium IDC Cloud Management Agent System) cloud management agent system, version V1.35 , is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw originates from the admin/tplSys_deal.php endpoint, specifically when the mudi=area parameter is used. This vulnerability allo...