511 matches found
idcCMS V1.60 - Cross-Site Scripting
idcCMS V1.60 is vulnerable to reflected cross-site scripting XSS via the idName parameter in read.php. Unsanitized user input is reflected in the response, allowing arbitrary JavaScript execution. id: CVE-2024-11587 info: name: idcCMS V1.60 - Cross-Site Scripting author: ritikchaddha severity:...
CVE-2026-108815
A vulnerability has been found in idcCMS 1.70. Affected is an unknown function of the file admin/memberdeal.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...
CVE-2026-108815
A vulnerability exists in idcCMS 1.70 affecting an unknown function within the admin/member_deal.php file. This flaw allows for remote cross-site scripting (XSS) . The exploit has been disclosed to the public and may be used. Specific remediation steps or detailed root cause analysis are not prov...
CVE-2026-108815 idcCMS member_deal.php cross site scripting
A vulnerability has been found in idcCMS 1.70. Affected is an unknown function of the file admin/memberdeal.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...
EUVD-2026-97294
A vulnerability has been found in idcCMS 1.70. Affected is an unknown function of the file admin/memberdeal.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...
CVE-2024-34958
CVE-2024-34957 idccms CSRF poc CVE-2024-34958 idccms CSRF poc...
CVE-2026-88746
idccms V1.70 is vulnerable to Cross Site Scripting XSS in /admin/makeDiydeal.php...
EUVD-2026-84203
idccms V1.70 is vulnerable to Cross Site Scripting XSS in /admin/makeDiydeal.php...
PT-2026-96269
Name of the Vulnerable Software and Affected Versions idccms version 1.70 Description The software is subject to Cross Site Scripting XSS, a flaw that allows attackers to inject malicious scripts into web pages viewed by other users. This issue occurs at the '/admin/makeDiy deal.php' endpoint...
CVE-2026-88746: Improper Neutralization of Input During Web Page Generation
idccms V1.70 is vulnerable to Cross Site Scripting XSS in /admin/makeDiydeal.php...
CVE-2026-88746
The idccms V1.70 software is vulnerable to a Cross Site Scripting (XSS) flaw located in the /admin/makeDiy_deal.php component. This vulnerability allows for potential execution of malicious scripts in a user's browser. No specific remediation, exploit details, or in-the-wild exploitation data are...
CVE-2026-88746
idccms V1.70 is vulnerable to Cross Site Scripting XSS in /admin/makeDiydeal.php...
CVE-2026-88746
idccms V1.70 is vulnerable to Cross Site Scripting XSS in /admin/makeDiydeal.php...
CVE-2024-34958
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/bannerdeal.php?mudi=add...
CVE-2024-39153
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infodeal.php?mudi=del=news...
CVE-2024-39023
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via admin/infodeal.php?mudi=add=close...
CVE-2024-39157
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/ipRecorddeal.php?mudi=del==1...
CVE-2024-39154
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/keyWorddeal.php?mudi=del=word...