CVE-2024-36670

The software idccms v1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) issue within the admin/vpsClass_deal.php?mudi=del component. This vulnerability allows for unauthorized requests to be made on behalf of the user. As a temporary workaround, users are advised to disable access to the a...

CVE-2024-36670: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/vpsClassdeal.php?mudi=del...

CVE-2024-36547

idccms V1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/vpsClassdeal.php?mudi=add...

CVE-2024-36547: Cross-Site Request Forgery (CSRF)

idccms V1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/vpsClassdeal.php?mudi=add...