CVE-2024-35011

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoTypedeal.php?mudi=rev&nohrefStr=close...

CVE-2024-35011

The idccms cloud management brokerage system (specifically version 1.35 ) is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/infoType_deal.php component through the mudi and nohrefStr parameters, which can lead to unauthorized requests. While version 1.36 is ment...

CVE-2024-35012

The idccms v1.35 cloud management brokerage system (by Net Titanium Technology, Inc.) is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the component /admin/infoType_deal.php?mudi=add&nohrefStr=close . An attacker could potentially leverage this to perform unauthorized act...

CVE-2024-35012

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoTypedeal.php?mudi=add&nohrefStr=close...

CVE-2024-35010

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/bannerdeal.php?mudi=del&dataType=&dataTypeCN=%E5%9B%BE%E7%89%87%E5%B9%BF%E5%91%8A&theme=cs&dataID=6...

CVE-2024-35010

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/bannerdeal.php?mudi=del&dataType=&dataTypeCN=%E5%9B%BE%E7%89%87%E5%B9%BF%E5%91%8A&theme=cs&dataID=6...

CVE-2024-35010

The idccms cloud management brokerage system (version 1.35 ) by Net Titanium Technology, Inc. is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/banner_deal.php component and involves the mudi, dataType, dataTypeCN, theme, and dataID parameters, potentially allow...

CVE-2024-35009

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/shareswitch.php?mudi=switch&dataType=&fieldName=state&fieldName2=state&tabName=banner&dataID=6...

CVE-2024-35009

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/shareswitch.php?mudi=switch&dataType=&fieldName=state&fieldName2=state&tabName=banner&dataID=6...

CVE-2024-35009

The idccms (Net Titanium IDC Cloud Management Brokerage System) version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/share_switch.php component, specifically when processing parameters such as mudi, dataType, fieldName, fieldName2, tabName, and dataID....

PT-2024-26291 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in the component "/admin/infoType deal.php" with parameters mudi and nohrefStr. This allows for unauthorized requests. Recommendations: For idccms version...

PT-2024-26288 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF in the component /admin/share switch.php. This component is vulnerable due to the presence of certain parameters, including mudi, dataType, fieldName,...

PT-2024-26292 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in the component "/admin/infoType deal.php?mudi=add&nohrefStr=close". Recommendations: For idccms version 1.35, consider disabling access to the...

PT-2024-26290 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF in the /admin/banner deal.php component. The mudi, dataType, dataTypeCN, theme, and dataID parameters are involved. This allows for unauthorized action...

CVE-2024-35009: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/shareswitch.php?mudi=switch&dataType=&fieldName=state&fieldName2=state&tabName=banner&dataID=6...

CVE-2024-35012: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoTypedeal.php?mudi=add&nohrefStr=close...

CVE-2024-35011: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoTypedeal.php?mudi=rev&nohrefStr=close...

CVE-2024-35010: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/bannerdeal.php?mudi=del&dataType=&dataTypeCN=%E5%9B%BE%E7%89%87%E5%B9%BF%E5%91%8A&theme=cs&dataID=6...

CVE-2024-33830

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/readDeal.php?mudi=clearWebCache...

CVE-2024-33829

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/readDeal.php?mudi=updateWebCache...