430 matches found
PT-2024-28370 · Idccms · Idccms
Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in the component "/admin/userSys deal.php?mudi=infoSet". This allows for potential unauthorized actions on the affected system. Recommendations: For idccm...
PT-2024-28369 · Idccms · Idccms
Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is a Cross-Site Request Forgery CSRF that affects the component /admin/ipRecord deal.php with parameters mudi=del, dataType=, and dataID=1. This allows for unauthorized actions to be performed...
CVE-2024-39156
CVE-2024-39156 affects idccms v1.35, with a Cross-Site Request Forgery (CSRF) vulnerability in the /admin/keyWord_deal.php?mudi=add component. The CVSS 3.1 base score is 3.8 (LOW), with user interaction not required and high privileges required for exploitation hints (per the provided metrics). C...
CVE-2024-39158
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/userSysdeal.php?mudi=infoSet...
CVE-2024-39153
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infodeal.php?mudi=del&dataType=news&dataTypeCN...
PT-2024-28368 · Idccms · Idccms
Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF that affects the /admin/keyWord deal.php component when the mudi parameter is set to add. This allows for unauthorized requests to be made on behalf of...
PT-2024-28365 · Idccms · Idccms
Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in the component /admin/info deal.php?mudi=del&dataType=news&dataTypeCN. This issue allows for unauthorized requests to be made. The mudi, dataType, and...
CVE-2024-39153
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infodeal.php?mudi=del&dataType=news&dataTypeCN...
CVE-2024-39155
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/ipRecorddeal.php?mudi=add...
idcCMS Security Breach
Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology, Inc. A security vulnerability exists in idcCMS v1.35, which originates from the component /admin/infodeal.php?mudi=del&dataType=news&dataTypeCN...
CVE-2024-39156
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/keyWorddeal.php?mudi=add...
CVE-2024-39154
CVE-2024-39154 affects idccms v1.35 and is a Cross-Site Request Forgery (CSRF) via the endpoint /admin/keyWord_deal.php?mudi=del&dataType=word&dataTypeCN. The NVD entry notes a CVSSv3.1 base score of 8.8 (HIGH): Network attack vector, low attack complexity, no privileges required, but user intera...
CVE-2024-39158
CVE-2024-39158 affects idccms v1.35 with a Cross-Site Request Forgery (CSRF) in the endpoint "/admin/userSys_deal.php?mudi=infoSet". The CVSSv3.1 base score is 8.8 (HIGH) with network attack vector, low access complexity, requiring user interaction, and impacts to confidentiality, integrity, and ...
CVE-2024-39155
idccms v1.35 contains a Cross-Site Request Forgery (CSRF) in the component /admin/ipRecord_deal.php?mudi=add. The CVE entry notes CVSS v3.1 base score 6.8 (Medium) with Confidentiality Impact: High, User Interaction: Required. Connected sources validate a CSRF flaw rather than an authentication b...
CVE-2024-39155
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/ipRecorddeal.php?mudi=add...
CVE-2024-39158
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/userSysdeal.php?mudi=infoSet...
CVE-2024-39157
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/ipRecorddeal.php?mudi=del&dataType=&dataID=1...
idcCMS Security Breach
Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology Net Titanium Technology. A security vulnerability exists in idcCMS v1.35, which originates from the component...