CVE-2024-36670

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/vpsClassdeal.php?mudi=del...

CVE-2024-36669

CVE-2024-36669 affects idccms v1.35, with a CSRF vulnerability in the admin/type_deal.php?mudi=add component. The root cause is an improper CSRF defense that allows unauthorized state-changing requests to be forged via that endpoint. The vulnerability impacts the application’s ability to perform ...

CVE-2024-36669

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/typedeal.php?mudi=add...

CVE-2024-36669

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/typedeal.php?mudi=add...

CVE-2024-36669: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/typedeal.php?mudi=add...

PT-2024-27111 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF in the admin/type deal.php component, specifically via the mudi=del parameter. This allows for unauthorized actions to be performed. Recommendations: F...

CVE-2024-36668: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/typedeal.php?mudi=del...

PT-2024-27112 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF in the admin/type deal.php component, specifically when the mudi parameter is set to add. This allows for unauthorized requests to be made on behalf of...

CVE-2024-36670: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/vpsClassdeal.php?mudi=del...

PT-2024-27114 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in the component "admin/vpsClass deal.php?mudi=del". This issue allows for unauthorized requests to be made on behalf of the user. Recommendations: For...

CVE-2024-36667: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/idcProTypedeal.php?mudi=add&nohrefStr=close...

CVE-2024-36548

idccms V1.35 was discovered to contain a Cross-Site Request Forgery CSRF via admin/vpsCompanydeal.php?mudi=del...

CVE-2024-36549

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via /admin/vpsCompanydeal.php?mudi=rev&nohrefStr=close...

CVE-2024-36550

idccms V1.35 was discovered to contain a Cross-Site Request Forgery CSRF via /admin/vpsCompanydeal.php?mudi=add&nohrefStr=close...

CVE-2024-36547

idccms V1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/vpsClassdeal.php?mudi=add...

CVE-2024-36548

idccms V1.35 was discovered to contain a Cross-Site Request Forgery CSRF via admin/vpsCompanydeal.php?mudi=del...

CVE-2024-36549

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via /admin/vpsCompanydeal.php?mudi=rev&nohrefStr=close...

CVE-2024-36550

idccms V1.35 was discovered to contain a Cross-Site Request Forgery CSRF via /admin/vpsCompanydeal.php?mudi=add&nohrefStr=close...

CVE-2024-36547

idccms V1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/vpsClassdeal.php?mudi=add...

CVE-2024-36550

idccms V1.35 was discovered to contain a Cross-Site Request Forgery CSRF via /admin/vpsCompanydeal.php?mudi=add&nohrefStr=close...