430 matches found
PT-2024-26547 · Idccms · Idccms
Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF in the /admin/ca deal.php component. The API Endpoint "/admin/ca deal.php" is vulnerable, specifically with parameters mudi=del and empty dataType and...
PT-2024-26545 · Idccms · Idccms
Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF in the component "/admin/infoMove deal.php" with parameters mudi and nohrefStr. This allows for unauthorized actions. Recommendations: For idccms versi...
idccms 安全漏洞
Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology Net Titanium Technology. A security vulnerability exists in idccms v1.35, which was discovered via the component /admin/infoWebdeal.php?mudi=add an...
PT-2024-26542 · Idccms · Idccms
Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in the component /admin/vpsSys deal.php with the mudi parameter set to infoSet. This allows for unauthorized requests to be made on behalf of the user...
idccms 安全漏洞
Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology Net Titanium Technology. A security vulnerability exists in idccms v1.35, which was discovered via the component...
PT-2024-26541 · Idccms · Idccms
Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF in the component /admin/share switch.php. The affected endpoint includes parameters such as mudi, dataType, fieldName, fieldName2, tabName, and dataID...
Exploit for Cross-Site Request Forgery (CSRF) in Idccms
CVE-2024-34...
Exploit for Cross-Site Request Forgery (CSRF) in Idccms
CVE-2024-34...
CVE-2024-35039
idccms V1.35 was discovered to contain a Cross-Site Request Forgery CSRF via admin/tplSysdeal.php?mudi=area...
CVE-2024-35039
idccms V1.35 was discovered to contain a Cross-Site Request Forgery CSRF via admin/tplSysdeal.php?mudi=area...
CVE-2024-34958
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/bannerdeal.php?mudi=add...
CVE-2024-34958
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/bannerdeal.php?mudi=add...
CVE-2024-34957
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/sysImagesdeal.php?mudi=infoSet...
CVE-2024-34957
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/sysImagesdeal.php?mudi=infoSet...
CVE-2024-34957
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/sysImagesdeal.php?mudi=infoSet...
CVE-2024-34957
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/sysImagesdeal.php?mudi=infoSet...
CVE-2024-34957
CVE-2024-34957 affects idccms v1.35. The vulnerability is a CSRF in the component admin/sysImages_deal.php?mudi=infoSet that could allow unauthorized actions on behalf of an authenticated user. Exploitation details are not provided beyond that CSRF context; no patch version is listed in the provi...
CVE-2024-34958
CVE-2024-34958 affects idccms v1.35, where a CSRF exists in the admin/banner_deal.php?mudi=add component. The vulnerability arises from a Cross-Site Request Forgery path that could enable unauthorized actions as described in sources linked to idccms CSRF. The CVSS base metrics in the initial reco...