496 matches found
idcCMS V1.60 - Cross-Site Scripting
idcCMS V1.60 is vulnerable to reflected cross-site scripting XSS via the idName parameter in read.php. Unsanitized user input is reflected in the response, allowing arbitrary JavaScript execution. id: CVE-2024-11587 info: name: idcCMS V1.60 - Cross-Site Scripting author: ritikchaddha severity:...
CVE-2024-34958
CVE-2024-34957 idccms CSRF poc CVE-2024-34958 idccms CSRF poc...
CVE-2026-88746
idccms V1.70 is vulnerable to Cross Site Scripting XSS in /admin/makeDiydeal.php...
CVE-2026-88746
idccms V1.70 is vulnerable to Cross Site Scripting XSS in /admin/makeDiydeal.php...
CVE-2026-88746: Improper Neutralization of Input During Web Page Generation
idccms V1.70 is vulnerable to Cross Site Scripting XSS in /admin/makeDiydeal.php...
CVE-2026-88746
The idccms V1.70 software is vulnerable to a Cross Site Scripting (XSS) flaw located in the /admin/makeDiy_deal.php component. This vulnerability allows for potential execution of malicious scripts in a user's browser. No specific remediation, exploit details, or in-the-wild exploitation data are...
PT-2026-96269
Name of the Vulnerable Software and Affected Versions idccms version 1.70 Description The software is subject to Cross Site Scripting XSS, a flaw that allows attackers to inject malicious scripts into web pages viewed by other users. This issue occurs at the '/admin/makeDiy deal.php' endpoint...
CVE-2026-88746
idccms V1.70 is vulnerable to Cross Site Scripting XSS in /admin/makeDiydeal.php...
CVE-2024-34958
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/bannerdeal.php?mudi=add...
CVE-2024-39153
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infodeal.php?mudi=del=news...
CVE-2024-39023
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via admin/infodeal.php?mudi=add=close...
CVE-2024-39157
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/ipRecorddeal.php?mudi=del==1...
CVE-2024-39154
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/keyWorddeal.php?mudi=del=word...
CVE-2024-39019
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/idcProDatadeal.php?mudi=del...
CVE-2024-39020
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/vpsApiDatadeal.php?mudi=rev=close...
CVE-2024-39158
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/userSysdeal.php?mudi=infoSet...
EUVD-2024-36155
Malicious code in bioql PyPI...
EUVD-2024-35362
Malicious code in bioql PyPI...