CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2024/05/22 2:15 p.m.•16 views

CVE-2024-35561

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/cadeal.php?mudi=add&nohrefStr=close...

5.4CVSS7.1AI score0.00185EPSS

Exploits1References1

Vulnrichment•added 2024/05/22 1:38 p.m.•14 views

CVE-2024-35561

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/cadeal.php?mudi=add&nohrefStr=close...

5.6AI score0.00185EPSS

Exploits1References1

CVE•added 2024/05/22 1:38 p.m.•77 views

CVE-2024-35561

CVE-2024-35561: idccms v1.35 is affected by a Cross-Site Request Forgery (CSRF) via /admin/ca_deal.php?mudi=add&nohrefStr=close. Reported CVSSv3.1: 5.4 (LOW confidentiality, LOW integrity, NONE availability; AV:N/AC:L/PR:L/UI:R/S:C). Root cause is CSRF in that component; exploitation details are ...

5.4CVSS7.8AI score0.00185EPSS

Exploits1References1Affected Software1