idcCMS 安全漏洞

idcCMS Nettie IDC cloud management agent system is a cloud management agent system of Fuzhou Nettie Software Technology Co. A cross-site request forgery vulnerability exists in idcCMS v1.35, which originates from admin/infodeal.php?mudi=rev&nohrefStr=close not adequately verifying whether a reque...

CVE-2024-39119: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via admin/infodeal.php?mudi=rev&nohrefStr=close...

CVE-2024-39119

The idcCMS (Nettie IDC cloud management agent system) v1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the admin/info_deal.php endpoint because the system fails to adequately verify if requests originate from a trusted user. An attacker could exploit this by forging...

CVE-2024-39119

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via admin/infodeal.php?mudi=rev&nohrefStr=close...

CVE-2024-39119

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via admin/infodeal.php?mudi=rev&nohrefStr=close...

CVE-2024-39157

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/ipRecorddeal.php?mudi=del&dataType=&dataID=1...

CVE-2024-39156

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/keyWorddeal.php?mudi=add...

CVE-2024-39156

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/keyWorddeal.php?mudi=add...

CVE-2024-39157

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/ipRecorddeal.php?mudi=del&dataType=&dataID=1...

CVE-2024-39158

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/userSysdeal.php?mudi=infoSet...

CVE-2024-39158

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/userSysdeal.php?mudi=infoSet...

CVE-2024-39154

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/keyWorddeal.php?mudi=del&dataType=word&dataTypeCN...

CVE-2024-39155

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/ipRecorddeal.php?mudi=add...

CVE-2024-39153

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infodeal.php?mudi=del&dataType=news&dataTypeCN...

CVE-2024-39154

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/keyWorddeal.php?mudi=del&dataType=word&dataTypeCN...

CVE-2024-39153

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infodeal.php?mudi=del&dataType=news&dataTypeCN...

CVE-2024-39158

The idccms v1.35 cloud management agent system is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/userSys_deal.php?mudi=infoSet component, which could allow an attacker to perform unauthorized actions on the affected system. As a temporary workaround, it is recom...

CVE-2024-39154: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/keyWorddeal.php?mudi=del&dataType=word&dataTypeCN...

CVE-2024-39156

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/keyWorddeal.php?mudi=add...

CVE-2024-39158

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/userSysdeal.php?mudi=infoSet...