Lucene search
+L

511 matches found

RedhatCVE
RedhatCVE
•added 2025/02/13 11:17 p.m.•24 views

CVE-2024-35552

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoMovedeal.php?mudi=del=logo...

8.8CVSS7.5AI score0.00289EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2025/02/13 11:09 p.m.•18 views

CVE-2024-35556

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/vpsSysdeal.php?mudi=infoSet...

8.8CVSS7.5AI score0.00295EPSS
SaveExploits1References3
NVD
NVD
•added 2024/11/21 1:15 p.m.•32 views

CVE-2024-11587

A vulnerability was found in idcCMS 1.60. It has been classified as problematic. This affects the function GetCityOptionJs of the file /inc/classProvCity.php. The manipulation of the argument idName leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has bee...

6.1CVSS0.0091EPSS
SaveExploits2References4
CVE
CVE
•added 2024/11/21 12:31 p.m.•102 views

CVE-2024-11587

CVE-2024-11587 affects idcCMS 1.60, specifically the GetCityOptionJs function in /inc/classProvCity.php, where manipulating the idName parameter triggers cross-site scripting. Exploitation can be remote; multiple sources flag XSS, with some templates noting a reflected XSS via idName (read.php). ...

6.1CVSS4.1AI score0.0091EPSS
SaveIn wildExploits2References4Affected Software1
Cvelist
Cvelist
•added 2024/11/21 12:31 p.m.•50 views

CVE-2024-11587 idcCMS classProvCity.php GetCityOptionJs cross site scripting

A vulnerability was found in idcCMS 1.60. It has been classified as problematic. This affects the function GetCityOptionJs of the file /inc/classProvCity.php. The manipulation of the argument idName leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has bee...

5.3CVSS0.0091EPSS
SaveExploits2References4
Vulnrichment
Vulnrichment
•added 2024/11/21 12:31 p.m.•20 views

CVE-2024-11587 idcCMS classProvCity.php GetCityOptionJs cross site scripting

A vulnerability was found in idcCMS 1.60. It has been classified as problematic. This affects the function GetCityOptionJs of the file /inc/classProvCity.php. The manipulation of the argument idName leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has bee...

5.3CVSS6.2AI score0.0091EPSS
SaveExploits2References4
Positive Technologies
Positive Technologies
•added 2024/11/21 12:00 a.m.•23 views

PT-2024-17119 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idcCMS version 1.60 Description: A problematic issue was found in idcCMS, affecting the GetCityOptionJs function of the file /inc/classProvCity.php. The manipulation of the idName argument leads to cross-site scripting. This issue can be...

6.1CVSS3.6AI score0.0091EPSS
SaveExploits2References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/21 12:00 a.m.•3 views

CVE-2024-11587: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in idcCMS 1.60. It has been classified as problematic. This affects the function GetCityOptionJs of the file /inc/classProvCity.php. The manipulation of the argument idName leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has bee...

6.1CVSS3.7AI score0.0091EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2024/11/21 12:00 a.m.•21 views

Wangtai idcCMS 安全漏洞

Wangtai idcCMS is a cloud management agent system from China Nettai Wangtai. A security vulnerability exists in Wangtai idcCMS version 1.60, which stems from improper manipulation of the parameter idName and can lead to cross-site scripting attacks...

6.1CVSS4.2AI score0.0091EPSS
SaveExploits2References1
NVD
NVD
•added 2024/07/10 2:15 p.m.•31 views

CVE-2024-40332

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/moneyRecorddeal.php?mudi=delRecord...

8.8CVSS0.00222EPSS
SaveExploits0References1
NVD
NVD
•added 2024/07/10 2:15 p.m.•30 views

CVE-2024-40331

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/dbBakMySQLdeal.php?mudi=backup...

8.8CVSS0.00301EPSS
SaveExploits1References1
NVD
NVD
•added 2024/07/10 2:15 p.m.•25 views

CVE-2024-40336

idccms v1.35 is vulnerable to Cross Site Scripting XSS within the 'Image Advertising Management.'...

6.1CVSS0.00362EPSS
SaveExploits1References1
OSV
OSV
•added 2024/07/10 2:15 p.m.•14 views

CVE-2024-40331

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/dbBakMySQLdeal.php?mudi=backup...

8.8CVSS5.8AI score0.00301EPSS
SaveExploits1References1
OSV
OSV
•added 2024/07/10 2:15 p.m.•13 views

CVE-2024-40332

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/moneyRecorddeal.php?mudi=delRecord...

8.8CVSS5.8AI score0.00222EPSS
SaveExploits0References1
OSV
OSV
•added 2024/07/10 1:15 p.m.•15 views

CVE-2024-40328

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/memberOnlinedeal.php?mudi=del&dataType=&dataID=6...

6.3CVSS5.8AI score0.00192EPSS
SaveExploits1References1
NVD
NVD
•added 2024/07/10 1:15 p.m.•26 views

CVE-2024-40328

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/memberOnlinedeal.php?mudi=del&dataType=&dataID=6...

6.3CVSS0.00192EPSS
SaveExploits1References1
NVD
NVD
•added 2024/07/10 1:15 p.m.•34 views

CVE-2024-40329

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/softBakdeal.php?mudi=backup...

8.8CVSS0.00295EPSS
SaveExploits1References1
OSV
OSV
•added 2024/07/10 1:15 p.m.•16 views

CVE-2024-40334

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/serverFiledeal.php?mudi=upFileDel&dataID=3...

8.8CVSS5.8AI score0.00295EPSS
SaveExploits1References1
OSV
OSV
•added 2024/07/10 1:15 p.m.•18 views

CVE-2024-40329

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/softBakdeal.php?mudi=backup...

8.8CVSS5.8AI score0.00295EPSS
SaveExploits1References1
OSV
OSV
•added 2024/07/10 1:15 p.m.•16 views

CVE-2024-40333

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/softBakdeal.php?mudi=del&dataID=2...

8.8CVSS5.8AI score0.00601EPSS
SaveExploits1References1
Rows per page
Query Builder