CVE-2024-35560

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/cadeal.php?mudi=del&dataType=&dataTypeCN...

CVE-2024-35560

CVE-2024-35560 affects idccms v1.35 and is a CSRF flaw in the /admin/ca_deal.php endpoint with parameters mudi=del, dataType, and dataTypeCN. The CVE documents report the vulnerability but do not provide exploit details beyond the CSRF condition; CVSSv3.1 base score is 4.3 (MEDIUM) with UI:Requir...

CVE-2024-35558

CVE-2024-35558: idccms v1.35 is reported to contain a Cross-Site Request Forgery (CSRF) in the admin action at /admin/ca_deal.php?mudi=rev&nohrefStr=close. The vulnerability enables unauthorized state-changing requests from an attacker-trusted user session, consistent with a HIGH-severity CVSS 3....