7 matches found
CVE-2026-108815
A vulnerability has been found in idcCMS 1.70. Affected is an unknown function of the file admin/memberdeal.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...
CVE-2026-108815
A vulnerability exists in idcCMS 1.70 affecting an unknown function within the admin/member_deal.php file. This flaw allows for remote cross-site scripting (XSS) . The exploit has been disclosed to the public and may be used. Specific remediation steps or detailed root cause analysis are not prov...
CVE-2026-108815 idcCMS member_deal.php cross site scripting
A vulnerability has been found in idcCMS 1.70. Affected is an unknown function of the file admin/memberdeal.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...
CVE-2026-108815 idcCMS member_deal.php cross site scripting
A vulnerability has been found in idcCMS 1.70. Affected is an unknown function of the file admin/memberdeal.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...
EUVD-2026-97294
A vulnerability has been found in idcCMS 1.70. Affected is an unknown function of the file admin/memberdeal.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...
CVE-2026-108815: Improper Neutralization of Input During Web Page Generation
A vulnerability has been found in idcCMS 1.70. Affected is an unknown function of the file admin/memberdeal.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...
CVE-2019-17369: Cross-Site Request Forgery (CSRF)
OTCMS v3.85 has CSRF in the admin/memberdeal.php Admin Panel page, leading to creation of a new management group account, as demonstrated by superadmin...