6 matches found
CVE-2024-35560
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/cadeal.php?mudi=del&dataType=&dataTypeCN...
CVE-2024-35560
The idccms v1.35 cloud management agent system by Net Titanium Technology contains a Cross-Site Request Forgery (CSRF) vulnerability. The flaw exists in the /admin/ca_deal.php component, specifically when the mudi=del parameter is used with empty dataType and dataTypeCN variables. This vulnerabil...
CVE-2024-35558
The idccms v1.35 (Net Titanium IDC Cloud Management Agent System) contains a Cross-Site Request Forgery (CSRF) vulnerability in the /admin/ca_deal.php component. This issue specifically involves the mudi and nohrefStr parameters, which can be exploited to perform unauthorized requests . While no ...
CVE-2024-35558: Cross-Site Request Forgery (CSRF)
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/cadeal.php?mudi=rev&nohrefStr=close...
CVE-2024-35561: Cross-Site Request Forgery (CSRF)
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/cadeal.php?mudi=add&nohrefStr=close...
CVE-2024-35560: Cross-Site Request Forgery (CSRF)
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/cadeal.php?mudi=del&dataType=&dataTypeCN...