430 matches found
CVE-2024-35039
idccms V1.35 was discovered to contain a Cross-Site Request Forgery CSRF via admin/tplSysdeal.php?mudi=area...
CVE-2024-35039
CVE-2024-35039 affects idccms version 1.35. The vulnerability is a Cross-Site Request Forgery (CSRF) that can be triggered via the endpoint admin/tplSys_deal.php?mudi=area. The available sources consistently describe a CSRF risk without detailing an exploitation method beyond the vulnerable endpo...
CVE-2024-35039
idccms V1.35 was discovered to contain a Cross-Site Request Forgery CSRF via admin/tplSysdeal.php?mudi=area...
idcCMS 安全漏洞
Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology Net Titanium Technology. A security vulnerability exists in idcCMS v1.35, which was discovered via the component admin/sysImagesdeal.php?mudi=infoS...
PT-2024-26294 · Idccms · Idccms
Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is a Cross-Site Request Forgery CSRF that affects the idccms software. It occurs via the "admin/tplSys deal.php?mudi=area" endpoint. This allows for unauthorized actions to be performed on behalf of ...
PT-2024-26271 · Idccms · Idccms
Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in idccms via the component admin/sysImages deal.php?mudi=infoSet. This allows for unauthorized actions to be performed on behalf of a user...
PT-2024-26272 · Idccms · Idccms
Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in idccms via the component "admin/banner deal.php?mudi=add". This allows for potential unauthorized actions. Recommendations: For idccms version 1.35, as...
CVE-2024-35109
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /homeProdeal.php?mudi=add&nohrefStr=close...
CVE-2024-35108
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/homeProdeal.php?mudi=del&dataType=&dataTypeCN...
CVE-2024-35109
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /homeProdeal.php?mudi=add&nohrefStr=close...
CVE-2024-35108
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/homeProdeal.php?mudi=del&dataType=&dataTypeCN...
CVE-2024-35109
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /homeProdeal.php?mudi=add&nohrefStr=close...
CVE-2024-35109
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /homeProdeal.php?mudi=add&nohrefStr=close...
CVE-2024-35108
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/homeProdeal.php?mudi=del&dataType=&dataTypeCN...
CVE-2024-35108
CVE-2024-35108 affects idccms v1.35, with a CSRF flaw exploitable via the admin path /admin/homePro_deal.php?mudi=del&dataType=&dataTypeCN. The issue originates from a vulnerable component handling parameters mudi, dataType, and dataTypeCN in the admin module, enabling unauthorized requests. The ...
CVE-2024-35108
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/homeProdeal.php?mudi=del&dataType=&dataTypeCN...
idcCMS Cross-Site Request Forgery Vulnerability in Fuzhou Nettie Software Technology Co.
idcCMS is a cloud management agent system of Fuzhou Nettie Software Technology Co. Ltd. idcCMS suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to send incorrect HTTP requests to perform cross-site scripting attacks, web cache poisoning, and other...
PT-2024-26320 · Idccms · Idccms
Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in the component "/admin/homePro deal.php" with parameters mudi, dataType, and dataTypeCN. This issue allows for unauthorized requests. Recommendations: F...