CVE-2024-35555

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/shareswitch.php?mudi=switch&dataType=newsWeb&fieldName=state&fieldName2=state&tabName=infoWeb&dataID=40...

PT-2024-26288 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF in the component /admin/share switch.php. This component is vulnerable due to the presence of certain parameters, including mudi, dataType, fieldName,...

OTCMS cross-site scripting vulnerability (CNVD-2018-19744)

OTCMS is an article-based web content management system CMS. A cross-site scripting vulnerability exists in the admin/shareswitch.php file in OTCMS version 3.61. A remote attacker can use the 'fieldName', 'fieldName2' and 'tabName' parameters to inject arbitrary Web script or HTML with the...

CVE-2018-17086

An issue was discovered in OTCMS 3.61. XSS exists in admin/shareswitch.php via these parameters: fieldName fieldName2 tabName...