CVE-2024-40329

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/softBakdeal.php?mudi=backup...

CVE-2024-40328

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/memberOnlinedeal.php?mudi=del&dataType=&dataID=6...

CVE-2024-40334

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/serverFiledeal.php?mudi=upFileDel&dataID=3...

CVE-2024-40333

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/softBakdeal.php?mudi=del&dataID=2...

CVE-2024-40328

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/memberOnlinedeal.php?mudi=del&dataType=&dataID=6...

CVE-2024-40334

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/serverFiledeal.php?mudi=upFileDel&dataID=3...

CVE-2024-40332

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/moneyRecorddeal.php?mudi=delRecord...

CVE-2024-40329

The idccms v1.35 cloud management agent system is vulnerable to a Cross-Site Request Forgery (CSRF) . This vulnerability exists in the /admin/softBak_deal.php API endpoint, specifically when the mudi parameter is set to backup . An attacker could exploit this to perform unauthorized actions on th...

CVE-2024-40331

The idccms v1.35 cloud management agent system is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/dbBakMySQL_deal.php endpoint when the mudi parameter is set to backup . This vulnerability allows an attacker to perform unauthorized actions on behalf of an authent...

CVE-2024-40334

idccms v1.35 contains a Cross-Site Request Forgery (CSRF) vulnerability affecting the endpoint /admin/serverFile_deal.php?mudi=upFileDel&dataID=3. The issue stems from CSRF in the admin file-deletion flow, with CVSS 3.1 base metrics indicating HIGH impact on confidentiality, integrity, and availa...

CVE-2024-40328

The Net Titanium Technology idcCMS (Net Titanium IDC Cloud Management Agent System) version v1.35 is affected by a Cross-Site Request Forgery (CSRF) vulnerability. The flaw is accessible via the endpoint /admin/memberOnline_deal.php?mudi=del&dataType=&dataID=6. This vulnerability allows an attack...

CVE-2024-40332

CVE-2024-40332 concerns idccms v1.35, which is affected by a CSRF flaw exploitable via the endpoint /admin/moneyRecord_deal.php?mudi=delRecord. The available documents consistently describe a CSRF vulnerability enabling unauthorized actions on the system, with no explicit exploit code or in‑the‑w...

CVE-2024-40334

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/serverFiledeal.php?mudi=upFileDel&dataID=3...

CVE-2024-40328

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/memberOnlinedeal.php?mudi=del&dataType=&dataID=6...

CVE-2024-40336

idccms v1.35 is vulnerable to Cross Site Scripting XSS within the 'Image Advertising Management.'...

CVE-2024-40331

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/dbBakMySQLdeal.php?mudi=backup...

CVE-2024-40333

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/softBakdeal.php?mudi=del&dataID=2...

PT-2024-28811 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in idccms. The vulnerability can be exploited via the "/admin/moneyRecord deal.php" endpoint, specifically when the mudi parameter is set to "delRecord"...

PT-2024-28807

Name of the Vulnerable Software and Affected Versions idccms version 1.35 Description A Cross-Site Request Forgery CSRF issue was discovered in idccms. The vulnerability can be exploited via the "/admin/memberOnline deal.php" API endpoint with specific parameters such as mudi, dataType, and dataI...

PT-2024-28814

Name of the Vulnerable Software and Affected Versions idccms version 1.35 Description The issue is related to Cross Site Scripting XSS within the 'Image Advertising Management' feature. This allows for malicious scripts to be injected into the website, potentially leading to unauthorized access o...