CVE-2024-40328

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/memberOnlinedeal.php?mudi=del&dataType=&dataID=6...

CVE-2024-40333

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/softBakdeal.php?mudi=del&dataID=2...

CVE-2024-40334

idccms v1.35 contains a Cross-Site Request Forgery (CSRF) vulnerability affecting the endpoint /admin/serverFile_deal.php?mudi=upFileDel&dataID=3. The issue stems from CSRF in the admin file-deletion flow, with CVSS 3.1 base metrics indicating HIGH impact on confidentiality, integrity, and availa...

CVE-2024-40334: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/serverFiledeal.php?mudi=upFileDel&dataID=3...

CVE-2024-40336

idccms v1.35 is vulnerable to Cross Site Scripting XSS within the 'Image Advertising Management.'...

CVE-2024-40334

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/serverFiledeal.php?mudi=upFileDel&dataID=3...

CVE-2024-40329

The idccms v1.35 cloud management agent system is vulnerable to a Cross-Site Request Forgery (CSRF) . This vulnerability exists in the /admin/softBak_deal.php API endpoint, specifically when the mudi parameter is set to backup . An attacker could exploit this to perform unauthorized actions on th...

CVE-2024-40331

The idccms v1.35 cloud management agent system is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/dbBakMySQL_deal.php endpoint when the mudi parameter is set to backup . This vulnerability allows an attacker to perform unauthorized actions on behalf of an authent...

CVE-2024-40332: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/moneyRecorddeal.php?mudi=delRecord...

CVE-2024-40332

CVE-2024-40332 concerns idccms v1.35, which is affected by a CSRF flaw exploitable via the endpoint /admin/moneyRecord_deal.php?mudi=delRecord. The available documents consistently describe a CSRF vulnerability enabling unauthorized actions on the system, with no explicit exploit code or in‑the‑w...

CVE-2024-40034

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userLeveldeal.php?mudi=del...

CVE-2024-40035

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userLeveldeal.php?mudi=add...

CVE-2024-40037

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userScoredeal.php?mudi=del...

CVE-2024-40038

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userScoredeal.php?mudi=rev...

idcCMS Security Breach

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system by Net Titanium Technology China. A security vulnerability exists in idcCMS v1.35, which originates from a cross-site request forgery vulnerability in the...

CVE-2024-40039

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userGroupdeal.php?mudi=del...

CVE-2024-40037

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userScoredeal.php?mudi=del...

CVE-2024-40037

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userScoredeal.php?mudi=del...

CVE-2024-40038

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userScoredeal.php?mudi=rev...

CVE-2024-40034

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userLeveldeal.php?mudi=del...