CVE-2024-40331

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/dbBakMySQLdeal.php?mudi=backup...

CVE-2024-40331: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/dbBakMySQLdeal.php?mudi=backup...

CVE-2024-40331

The idccms v1.35 cloud management agent system is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/dbBakMySQL_deal.php endpoint when the mudi parameter is set to backup . This vulnerability allows an attacker to perform unauthorized actions on behalf of an authent...