Lucene search
+L

511 matches found

NVD
NVD
•added 2024/05/06 1:15 p.m.•24 views

CVE-2024-33830

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/readDeal.php?mudi=clearWebCache...

8.1CVSS7.1AI score0.00299EPSS
SaveExploits1References1
NVD
NVD
•added 2024/05/06 1:15 p.m.•123 views

CVE-2024-33829

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/readDeal.php?mudi=updateWebCache...

5.4CVSS7.1AI score0.0021EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/05/06 12:00 a.m.•12 views

idccms 安全漏洞

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology Net Titanium Technology. A security vulnerability exists in idccms v1.35, which originates from admin/readDeal.php containing a cross-site request...

5.4CVSS6.8AI score0.0021EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/05/06 12:00 a.m.•16 views

PT-2024-25500 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in the component /admin/readDeal.php?mudi=updateWebCache. This issue allows for potential exploitation. Recommendations: For idccms version 1.35, consider...

5.4CVSS7.1AI score0.0021EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2024/05/06 12:00 a.m.•21 views

CVE-2024-33829

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/readDeal.php?mudi=updateWebCache...

7.5AI score0.0021EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/05/06 12:00 a.m.•19 views

PT-2024-25501 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in the /admin/readDeal.php component, specifically via the mudi parameter set to clearWebCache. This allows for unauthorized actions to be performed on...

8.1CVSS6.7AI score0.00299EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/05/06 12:00 a.m.•17 views

CVE-2024-33830

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/readDeal.php?mudi=clearWebCache...

7.5AI score0.00299EPSS
SaveExploits1References1
CVE
CVE
•added 2024/05/06 12:00 a.m.•82 views

CVE-2024-33830

The idccms v1.35 cloud management agent system is vulnerable to a Cross-Site Request Forgery (CSRF) flaw in the /admin/readDeal.php component. Specifically, an attacker can exploit the mudi parameter when set to clearWebCache to perform unauthorized actions on behalf of a user. As a temporary wor...

8.1CVSS7.4AI score0.00299EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/06 12:00 a.m.•5 views

CVE-2024-33830: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/readDeal.php?mudi=clearWebCache...

8.1CVSS5.7AI score0.00299EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/06 12:00 a.m.•6 views

CVE-2024-33829: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/readDeal.php?mudi=updateWebCache...

5.4CVSS5.7AI score0.0021EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/05/06 12:00 a.m.•44 views

CVE-2024-33830

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/readDeal.php?mudi=clearWebCache...

7.3AI score0.00299EPSS
SaveExploits1References1
OSV
OSV
•added 2024/04/25 2:15 p.m.•16 views

CVE-2024-4172

A vulnerability classified as problematic was found in idcCMS 1.35. Affected by this vulnerability is an unknown functionality of the file /admin/admincl.php?mudi=revPwd. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to t...

4.3CVSS4.8AI score0.00434EPSS
SaveExploits1References4
NVD
NVD
•added 2024/04/25 2:15 p.m.•24 views

CVE-2024-4172

A vulnerability classified as problematic was found in idcCMS 1.35. Affected by this vulnerability is an unknown functionality of the file /admin/admincl.php?mudi=revPwd. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to t...

5CVSS4.7AI score0.00434EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/04/25 2:00 p.m.•18 views

CVE-2024-4172 idcCMS cross-site request forgery

A vulnerability classified as problematic was found in idcCMS 1.35. Affected by this vulnerability is an unknown functionality of the file /admin/admincl.php?mudi=revPwd. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to t...

5CVSS4.7AI score0.00434EPSS
SaveExploits1References4
CVE
CVE
•added 2024/04/25 2:00 p.m.•86 views

CVE-2024-4172

CVE-2024-4172 affects idcCMS 1.35. The vulnerability involves an unknown functionality at /admin/admin_cl.php?mudi=revPwd that enables cross-site request forgery. The issue can be exploited remotely and the exploit has been disclosed publicly (VDB-261991). Multiple connected records corroborate t...

5CVSS5AI score0.00434EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2024/04/25 2:00 p.m.•42 views

CVE-2024-4172 idcCMS cross-site request forgery

A vulnerability classified as problematic was found in idcCMS 1.35. Affected by this vulnerability is an unknown functionality of the file /admin/admincl.php?mudi=revPwd. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to t...

5CVSS5AI score0.00434EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/25 12:00 a.m.•5 views

CVE-2024-4172: Cross-Site Request Forgery (CSRF)

A vulnerability classified as problematic was found in idcCMS 1.35. Affected by this vulnerability is an unknown functionality of the file /admin/admincl.php?mudi=revPwd. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to t...

5CVSS5.2AI score0.00434EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/04/25 12:00 a.m.•5 views

PT-2024-29536

Name of the Vulnerable Software and Affected Versions idcCMS version 1.35 Description A problematic issue was found in idcCMS, affecting an unknown functionality of the file "/admin/admin cl.php?mudi=revPwd". This issue leads to cross-site request forgery and can be launched remotely...

5CVSS5.4AI score0.00434EPSS
SaveExploits1References9
attackerkb
attackerkb
•added 2022/03/21 10:15 p.m.•11 views

CVE-2022-27333

idcCMS v1.10 was discovered to contain an issue which allows attackers to arbitrarily delete the install.lock file, resulting in a reset of the CMS settings and data...

7.5CVSS5.9AI score0.00796EPSS
SaveExploits1References2
OSV
OSV
•added 2022/03/21 10:15 p.m.•12 views

CVE-2022-27333

idcCMS v1.10 was discovered to contain an issue which allows attackers to arbitrarily delete the install.lock file, resulting in a reset of the CMS settings and data...

7.5CVSS7.1AI score0.00796EPSS
SaveExploits1References1
Rows per page
Query Builder