CVE-2024-35011

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoTypedeal.php?mudi=rev&nohrefStr=close...

CVE-2024-35009

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/shareswitch.php?mudi=switch&dataType=&fieldName=state&fieldName2=state&tabName=banner&dataID=6...

CVE-2024-35009

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/shareswitch.php?mudi=switch&dataType=&fieldName=state&fieldName2=state&tabName=banner&dataID=6...

CVE-2024-35010

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/bannerdeal.php?mudi=del&dataType=&dataTypeCN=%E5%9B%BE%E7%89%87%E5%B9%BF%E5%91%8A&theme=cs&dataID=6...

CVE-2024-35010

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/bannerdeal.php?mudi=del&dataType=&dataTypeCN=%E5%9B%BE%E7%89%87%E5%B9%BF%E5%91%8A&theme=cs&dataID=6...

CVE-2024-35011

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoTypedeal.php?mudi=rev&nohrefStr=close...

CVE-2024-35011

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoTypedeal.php?mudi=rev&nohrefStr=close...

CVE-2024-35012

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoTypedeal.php?mudi=add&nohrefStr=close...

CVE-2024-35011

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoTypedeal.php?mudi=rev&nohrefStr=close...

CVE-2024-35011

CVE-2024-35011: idccms v1.35 contains a CSRF vulnerability in the admin endpoint /admin/infoType_deal.php?mudi=rev&nohrefStr=close. CVSSv3.1: AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N; base score 5.4 (MEDIUM). Exploitation context is not detailed in the documents; one source notes access restrictions a...

CVE-2024-35012

CVE-2024-35012 affects idccms v1.35, with a CSRF vulnerability in the /admin/infoType_deal.php?mudi=add&nohrefStr=close endpoint. Root cause is CSRF in the admin interface component; CVSS v3.1 base score 6.3 (MEDIUM) with low impact across confidentiality, integrity, and availability. Connected s...

CVE-2024-35012

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoTypedeal.php?mudi=add&nohrefStr=close...

CVE-2024-35010

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/bannerdeal.php?mudi=del&dataType=&dataTypeCN=%E5%9B%BE%E7%89%87%E5%B9%BF%E5%91%8A&theme=cs&dataID=6...

CVE-2024-35010

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/bannerdeal.php?mudi=del&dataType=&dataTypeCN=%E5%9B%BE%E7%89%87%E5%B9%BF%E5%91%8A&theme=cs&dataID=6...

CVE-2024-35010

CVE-2024-35010 in idccms v1.35 is associated with a CSRF in the admin/banner_deal.php (and related banner deal.php) component. The issue involves parameters such as mudi, dataType, dataTypeCN, theme, and dataID to perform unauthorized actions. The PT-Security entry confirms a CSRF in the /admin/b...

CVE-2024-35009

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/shareswitch.php?mudi=switch&dataType=&fieldName=state&fieldName2=state&tabName=banner&dataID=6...

CVE-2024-35009

CVE-2024-35009 affects idccms v1.35 with a Cross-Site Request Forgery (CSRF) risk in the /admin/share_switch.php endpoint, where parameters like mudi, dataType, fieldName, fieldName2, tabName, and dataID are used. The issue is documented to involve CSRF in the share_switch.php component, indicati...

CVE-2024-35009

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/shareswitch.php?mudi=switch&dataType=&fieldName=state&fieldName2=state&tabName=banner&dataID=6...

PT-2024-26292 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in the component "/admin/infoType deal.php?mudi=add&nohrefStr=close". Recommendations: For idccms version 1.35, consider disabling access to the...

PT-2024-26290 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF in the /admin/banner deal.php component. The mudi, dataType, dataTypeCN, theme, and dataID parameters are involved. This allows for unauthorized action...