430 matches found
CVE-2024-39020
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/vpsApiDatadeal.php?mudi=rev&nohrefStr=close...
CVE-2024-39023
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via admin/infodeal.php?mudi=add&nohrefStr=close...
idcCMS Security Breach
Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Proxy System is a cloud management proxy system from China's Net Titanium Technology, Inc. A security vulnerability exists in idcCMS version 1.35, which is vulnerable to cross-site request forgery CSRF attacks...
CVE-2024-39023
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via admin/infodeal.php?mudi=add&nohrefStr=close...
idcCMS Cross-Site Request Forgery Vulnerability (CNVD-2024-33205)
idcCMS Nettie IDC cloud management agent system is a cloud management agent system of Fuzhou Nettie Software Technology Co. A cross-site request forgery vulnerability exists in idcCMS v1.35, which originates from admin/infodeal.php?mudi=rev&nohrefStr=close not adequately verifying whether a reque...
CVE-2024-39019
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/idcProDatadeal.php?mudi=del...
CVE-2024-39022
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/infoSysdeal.php?mudi=deal...
CVE-2024-39022
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/infoSysdeal.php?mudi=deal...
CVE-2024-39021
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/vpsApiDatadeal.php?mudi=del...
CVE-2024-39019
CVE-2024-39019 affects idccms v1.35, exposing a Cross-Site Request Forgery (CSRF) via the endpoint /admin/idcProData_deal.php?mudi=del . The Red Hat/CNNVD/CVE sources corroborate CSRF in idccms 1.35 and highlight the vulnerable parameter combination (mudi=del) that enables unauthorized actions. N...
CVE-2024-39023
CVE-2024-39023 affects idccms v1.35, with a Cross-Site Request Forgery (CSRF) vulnerability in admin/info_deal.php?mudi=add&nohrefStr=close. The CVSS v3.1 report assigns high impact (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) and a base score of 8.8. Public references identify the affected component as...
CVE-2024-39022
CVE-2024-39022 affects idccms v1.35. It is a CSRF vulnerability exploitable via /admin/infoSys_deal.php?mudi=deal, with CVSS v3.1 metrics indicating HIGH impact (C/H, I/H, A/H), network vector, low attack complexity, no privileges required, user interaction required. Connected sources corroborate...
PT-2024-28333 · Idccms · Idccms
Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in idccms. The vulnerability can be exploited via the "/admin/infoSys deal.php" endpoint, specifically when the mudi parameter is set to deal. This allows...
CVE-2024-39020
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/vpsApiDatadeal.php?mudi=rev&nohrefStr=close...
PT-2024-28331 · Idccms · Idccms
Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in idccms via the "/admin/vpsApiData deal.php" endpoint, specifically when the mudi and nohrefStr parameters are set to 'rev' and 'close', respectively...
CVE-2024-39021
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/vpsApiDatadeal.php?mudi=del...
PT-2024-28332 · Idccms · Idccms
Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF in the component /admin/vpsApiData deal.php. The mudi parameter is involved, specifically when set to del. This allows for unauthorized actions to be...
CVE-2024-39020
idccms v1.35 is affected by a CSRF vulnerability exploitable through /admin/vpsApiData_deal.php?mudi=rev&nohrefStr=close. The issue, described across multiple sources, involves unauthorized actions via a crafted request. The connected PT-PTSecurity advisory notes a temporary workaround to disable...
CVE-2024-39021
CVE-2024-39021 affects idccms v1.35, with a Cross-Site Request Forgery (CSRF) vulnerability in the component /admin/vpsApiData_deal.php?mudi=del. The available documents attribute the issue to that specific endpoint/action, but do not provide a patch version, workaround, exploit details, or mitig...
