511 matches found
CVE-2024-36549
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via /admin/vpsCompanydeal.php?mudi=rev&nohrefStr=close...
CVE-2024-36548
idccms V1.35 was discovered to contain a Cross-Site Request Forgery CSRF via admin/vpsCompanydeal.php?mudi=del...
CVE-2024-36548
idccms V1.35 was discovered to contain a Cross-Site Request Forgery CSRF via admin/vpsCompanydeal.php?mudi=del...
CVE-2024-36547
idccms V1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/vpsClassdeal.php?mudi=add...
PT-2024-27065 · Idccms · Idccms
Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF that was discovered in idccms. This CSRF is via the component "admin/vpsClass deal.php?mudi=add". Recommendations: For idccms version 1.35, as a...
PT-2024-27067 · Idccms · Idccms
Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in idccms. The issue is related to the /admin/vpsCompany deal.php endpoint, specifically with the parameters mudi and nohrefStr. Recommendations: For idcc...
CVE-2024-36547: Cross-Site Request Forgery (CSRF)
idccms V1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/vpsClassdeal.php?mudi=add...
PT-2024-27069
Name of the Vulnerable Software and Affected Versions idccms version 1.35 Description The issue is related to a Cross-Site Request Forgery CSRF that can be exploited via the /admin/vpsCompany deal.php endpoint with specific parameters mudi=add and nohrefStr=close. This allows for unauthorized...
CVE-2024-36548: Cross-Site Request Forgery (CSRF)
idccms V1.35 was discovered to contain a Cross-Site Request Forgery CSRF via admin/vpsCompanydeal.php?mudi=del...
PT-2024-27066 · Idccms · Idccms
Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF that was discovered in idccms. This CSRF is accessible via the "admin/vpsCompany deal.php?mudi=del" endpoint. Recommendations: For idccms version 1.35,...
CVE-2024-36549: Cross-Site Request Forgery (CSRF)
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via /admin/vpsCompanydeal.php?mudi=rev&nohrefStr=close...
CVE-2024-36550: Cross-Site Request Forgery (CSRF)
idccms V1.35 was discovered to contain a Cross-Site Request Forgery CSRF via /admin/vpsCompanydeal.php?mudi=add&nohrefStr=close...
CVE-2024-35553
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoMovedeal.php?mudi=add&nohrefStr=close...
CVE-2024-35552
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoMovedeal.php?mudi=del&dataType=logo&dataTypeCN...
CVE-2024-35555
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/shareswitch.php?mudi=switch&dataType=newsWeb&fieldName=state&fieldName2=state&tabName=infoWeb&dataID=40...
CVE-2024-35556
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/vpsSysdeal.php?mudi=infoSet...
CVE-2024-35557
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/vpsApideal.php?mudi=rev&nohrefStr=close...
CVE-2024-35561
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/cadeal.php?mudi=add&nohrefStr=close...