CVE-2024-35553

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoMovedeal.php?mudi=add&nohrefStr=close...

CVE-2024-35553

CVE-2024-35553 affects idccms v1.35. A Cross-Site Request Forgery vulnerability exists in the admin/infoMove_deal.php endpoint (parameters mudi=add and nohrefStr=close). The issue is documented across multiple sources (including Red Hat/NVD/CVE lists and PT-Security) with no public exploit detail...

CVE-2024-35551

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoWebdeal.php?mudi=add...

CVE-2024-35551

CVE-2024-35551 affects idccms v1.35 and is a Cross-Site Request Forgery (CSRF) vulnerability in the endpoint /admin/infoWeb_deal.php?mudi=add. Red Hat and NVD entries corroborate the issue; PT-Security adds a practical workaround: restrict access to that endpoint and avoid using the mudi paramete...

CVE-2024-35552

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoMovedeal.php?mudi=del&dataType=logo&dataTypeCN...

CVE-2024-35552

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoMovedeal.php?mudi=del&dataType=logo&dataTypeCN...

CVE-2024-35551

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoWebdeal.php?mudi=add...

CVE-2024-35550

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoWebdeal.php?mudi=rev...

CVE-2024-35550

CVE-2024-35550 affects idccms v1.35. The vulnerability is a Cross-Site Request Forgery (CSRF) in the component /admin/infoWeb_deal.php?mudi=rev, enabling unauthorized actions by an authenticated user. CVSS v3.1 base score 6.3 (Network, Low to Medium impact; UI required). No exploit details or pro...

CVE-2024-35550

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoWebdeal.php?mudi=rev...

PT-2024-26541 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF in the component /admin/share switch.php. The affected endpoint includes parameters such as mudi, dataType, fieldName, fieldName2, tabName, and dataID...

PT-2024-26536 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in the component /admin/infoWeb deal.php, specifically with the mudi parameter set to rev. This allows for unauthorized requests to be made on behalf of t...

idccms 安全漏洞

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology Net Titanium Technology. A security vulnerability exists in idccms v1.35, which was discovered via the component /admin/infoWebdeal.php?mudi=add an...

idccms 安全漏洞

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology Net Titanium Technology. A security vulnerability exists in idccms v1.35, which was discovered via the component...

PT-2024-26547 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF in the /admin/ca deal.php component. The API Endpoint "/admin/ca deal.php" is vulnerable, specifically with parameters mudi=del and empty dataType and...

idccms 安全漏洞

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology, Inc. A security vulnerability exists in idccms v1.35, which was discovered via the component /admin/infoMovedeal.php?mudi=add&nohrefStr=close and...

idccms 安全漏洞

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology, Inc. A security vulnerability exists in idccms v1.35, which was discovered via the component /admin/cadeal.php?mudi=add&nohrefStr=close and contai...

PT-2024-26542 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in the component /admin/vpsSys deal.php with the mudi parameter set to infoSet. This allows for unauthorized requests to be made on behalf of the user...

PT-2024-26538 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF in the component /admin/infoMove deal.php with parameters mudi=del, dataType=logo, and dataTypeCN. This allows for unauthorized actions to be performed...

PT-2024-26540 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF in the component /admin/infoWeb deal.php. The mudi, dataType, and dataTypeCN parameters are involved. This allows for unauthorized actions to be...