CVE-2024-39157

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/ipRecorddeal.php?mudi=del&dataType=&dataID=1...

idcCMS Security Breach

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology Net Titanium Technology. A security vulnerability exists in idcCMS v1.35, which originates from the component...

CVE-2024-39154

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/keyWorddeal.php?mudi=del&dataType=word&dataTypeCN...

PT-2024-28367 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF in the /admin/ipRecord deal.php component when the mudi parameter is set to add. This allows for unauthorized actions to be performed. Recommendations:...

CVE-2024-39158

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/userSysdeal.php?mudi=infoSet...

CVE-2024-39154

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/keyWorddeal.php?mudi=del&dataType=word&dataTypeCN...

PT-2024-28369 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is a Cross-Site Request Forgery CSRF that affects the component /admin/ipRecord deal.php with parameters mudi=del, dataType=, and dataID=1. This allows for unauthorized actions to be performed...

CVE-2024-39155

The idccms v1.35 (Net Titanium IDC Cloud Management Proxy System) is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/ipRecord_deal.php component when the mudi parameter is set to add , potentially allowing an attacker to perform unauthorized actions. No specific ...

CVE-2024-39156

idcCMS (Net Titanium IDC Cloud Management Proxy System) version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/keyWord_deal.php component when the mudi parameter is set to add , potentially allowing unauthorized requests to be made on behalf of a user. A...

CVE-2024-36667

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/idcProTypedeal.php?mudi=add&nohrefStr=close...

CVE-2024-36668

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/typedeal.php?mudi=del...

CVE-2024-36669

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/typedeal.php?mudi=add...

CVE-2024-36670

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/vpsClassdeal.php?mudi=del...

CVE-2024-36667

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/idcProTypedeal.php?mudi=add&nohrefStr=close...

CVE-2024-36669

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/typedeal.php?mudi=add...

CVE-2024-36667

CVE-2024-36667 affects idccms v1.35 and is a Cross-Site Request Forgery (CSRF) vulnerability in the admin endpoint /admin/idcProType_deal.php?mudi=add&nohrefStr=close. The issue enables unauthorized actions to be performed in the context of a logged-in user (impacting confidentiality, integrity a...

CVE-2024-36667

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/idcProTypedeal.php?mudi=add&nohrefStr=close...

CVE-2024-36668

CVE-2024-36668 affects idccms v1.35, with a Cross-Site Request Forgery (CSRF) in the admin/type_deal.php?mudi=del component. The root cause is a CSRF in the admin endpoint, enabling unauthorized actions to be performed without user consent. The Red Hat/PT Security entry confirms a CSRF in the sam...

CVE-2024-36668

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/typedeal.php?mudi=del...

CVE-2024-36668

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/typedeal.php?mudi=del...