CVE-2024-39158

CVE-2024-39158 affects idccms v1.35 with a Cross-Site Request Forgery (CSRF) in the endpoint "/admin/userSys_deal.php?mudi=infoSet". The CVSSv3.1 base score is 8.8 (HIGH) with network attack vector, low access complexity, requiring user interaction, and impacts to confidentiality, integrity, and ...

CVE-2024-39157

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/ipRecorddeal.php?mudi=del&dataType=&dataID=1...

CVE-2024-39158

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/userSysdeal.php?mudi=infoSet...

CVE-2024-39153

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infodeal.php?mudi=del&dataType=news&dataTypeCN...

CVE-2024-39155

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/ipRecorddeal.php?mudi=add...

idcCMS Security Breach

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology, Inc. A security vulnerability exists in idcCMS v1.35, which originates from the component /admin/infodeal.php?mudi=del&dataType=news&dataTypeCN...

CVE-2024-39156

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/keyWorddeal.php?mudi=add...

PT-2024-28369 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is a Cross-Site Request Forgery CSRF that affects the component /admin/ipRecord deal.php with parameters mudi=del, dataType=, and dataID=1. This allows for unauthorized actions to be performed...

CVE-2024-39156

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/keyWorddeal.php?mudi=add...

CVE-2024-39153

CVE-2024-39153 affects idccms v1.35 with a CSRF flaw in the admin component /admin/info_deal.php?mudi=del&dataType=news&dataTypeCN. The Root Cause is CSRF in that endpoint allowing unauthorized actions; impact is labeled low to moderate per CVSS 3.1 (base 4.7, MEDIUM) with low confidentiality/int...

CVE-2024-39157

CVE-2024-39157 affects idccms v1.35 via a CSRF in the endpoint /admin/ipRecord_deal.php?mudi=del&dataType=&dataID=1. The CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N) yields a base score of 3.8 (LOW). Documented sources (NVD, Red Hat, CNNVD, CVE lists, PT-2024-28369) confirm the CSRF issu...

CVE-2024-39156

CVE-2024-39156 affects idccms v1.35, with a Cross-Site Request Forgery (CSRF) vulnerability in the /admin/keyWord_deal.php?mudi=add component. The CVSS 3.1 base score is 3.8 (LOW), with user interaction not required and high privileges required for exploitation hints (per the provided metrics). C...

CVE-2024-39155

idccms v1.35 contains a Cross-Site Request Forgery (CSRF) in the component /admin/ipRecord_deal.php?mudi=add. The CVE entry notes CVSS v3.1 base score 6.8 (Medium) with Confidentiality Impact: High, User Interaction: Required. Connected sources validate a CSRF flaw rather than an authentication b...

CVE-2024-39154

CVE-2024-39154 affects idccms v1.35 and is a Cross-Site Request Forgery (CSRF) via the endpoint /admin/keyWord_deal.php?mudi=del&dataType=word&dataTypeCN. The NVD entry notes a CVSSv3.1 base score of 8.8 (HIGH): Network attack vector, low attack complexity, no privileges required, but user intera...

PT-2024-28368 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF that affects the /admin/keyWord deal.php component when the mudi parameter is set to add. This allows for unauthorized requests to be made on behalf of...

CVE-2024-39154

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/keyWorddeal.php?mudi=del&dataType=word&dataTypeCN...

CVE-2024-39158

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/userSysdeal.php?mudi=infoSet...

CVE-2024-39154

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/keyWorddeal.php?mudi=del&dataType=word&dataTypeCN...

PT-2024-28365 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in the component /admin/info deal.php?mudi=del&dataType=news&dataTypeCN. This issue allows for unauthorized requests to be made. The mudi, dataType, and...

idcCMS Security Breach

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology Net Titanium Technology. A security vulnerability exists in idcCMS v1.35, which originates from the component...