CVE-2024-36670

CVE-2024-36670 impacts idccms v1.35 with a CSRF in the admin/vpsClass_deal.php?mudi=del component. Root cause: CSRF allows unauthorized actions to be triggered by a user, with CVSSv3.1 base score 8.8 (HIGH) and an attacker requiring user interaction. Affected software is explicitly idccms v1.35; ...

CVE-2024-36547

idccms V1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/vpsClassdeal.php?mudi=add...