CVE-2024-35560

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/cadeal.php?mudi=del&dataType=&dataTypeCN...

CVE-2024-35560

The Net Titanium Technology idcCMS (IDC Cloud Management Agent System) version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/ca_deal.php component, specifically when the mudi=del parameter is used with empty dataType and dataTypeCN variables. This vulne...

CVE-2024-35558

The idccms cloud management agent system (version 1.35 ) by Net Titanium Technology is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/ca_deal.php component, specifically involving the mudi and nohrefStr parameters, which allows for unauthorized requests. As a te...

CVE-2024-35558: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/cadeal.php?mudi=rev&nohrefStr=close...

CVE-2024-35561: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/cadeal.php?mudi=add&nohrefStr=close...

CVE-2024-35560: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/cadeal.php?mudi=del&dataType=&dataTypeCN...