511 matches found
CVE-2024-40332
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/moneyRecorddeal.php?mudi=delRecord...
CVE-2024-40333: Improper Neutralization of Input During Web Page Generation
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/softBakdeal.php?mudi=del&dataID=2...
CVE-2024-40336: Improper Neutralization of Input During Web Page Generation
idccms v1.35 is vulnerable to Cross Site Scripting XSS within the 'Image Advertising Management.'...
CVE-2024-40334: Cross-Site Request Forgery (CSRF)
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/serverFiledeal.php?mudi=upFileDel&dataID=3...
CVE-2024-40328: Cross-Site Request Forgery (CSRF)
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/memberOnlinedeal.php?mudi=del&dataType=&dataID=6...
PT-2024-28813 · Idccms · Idccms
Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in idccms. The vulnerability can be exploited via the "/admin/serverFile deal.php" endpoint, specifically when the mudi parameter is set to "upFileDel" an...
CVE-2024-40333
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/softBakdeal.php?mudi=del&dataID=2...
CVE-2024-40328
The Net Titanium Technology idcCMS (Net Titanium IDC Cloud Management Agent System) version v1.35 is affected by a Cross-Site Request Forgery (CSRF) vulnerability. The flaw is accessible via the endpoint /admin/memberOnline_deal.php?mudi=del&dataType=&dataID=6. This vulnerability allows an attack...
Net Titanium Technology idcCMS Security Breach
Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology Net Titanium Technology. A security vulnerability exists in Net Titanium Technology idcCMS v1.35, which was discovered to contain a cross-site...
CVE-2024-40328
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/memberOnlinedeal.php?mudi=del&dataType=&dataID=6...
CVE-2024-40329
The idccms v1.35 cloud management agent system is vulnerable to a Cross-Site Request Forgery (CSRF) . This vulnerability exists in the /admin/softBak_deal.php API endpoint, specifically when the mudi parameter is set to backup . An attacker could exploit this to perform unauthorized actions on th...
CVE-2024-40336
idccms v1.35 is vulnerable to Cross Site Scripting XSS within the 'Image Advertising Management.'...
PT-2024-28810
Name of the Vulnerable Software and Affected Versions idccms version 1.35 Description A Cross-Site Request Forgery CSRF issue was discovered in idccms. The vulnerability can be exploited via the "/admin/dbBakMySQL deal.php" endpoint, specifically when the mudi parameter is set to "backup"...
CVE-2024-40329: Cross-Site Request Forgery (CSRF)
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/softBakdeal.php?mudi=backup...
PT-2024-28807
Name of the Vulnerable Software and Affected Versions idccms version 1.35 Description A Cross-Site Request Forgery CSRF issue was discovered in idccms. The vulnerability can be exploited via the "/admin/memberOnline deal.php" API endpoint with specific parameters such as mudi, dataType, and dataI...
PT-2024-28808
Name of the Vulnerable Software and Affected Versions idccms version 1.35 Description The issue is a Cross-Site Request Forgery CSRF vulnerability. It can be exploited via the "/admin/softBak deal.php" API endpoint, specifically when the mudi parameter is set to "backup". This allows an attacker ...
CVE-2024-40329
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/softBakdeal.php?mudi=backup...
PT-2024-28814
Name of the Vulnerable Software and Affected Versions idccms version 1.35 Description The issue is related to Cross Site Scripting XSS within the 'Image Advertising Management' feature. This allows for malicious scripts to be injected into the website, potentially leading to unauthorized access o...
