CVE-2024-35554

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoWebdeal.php?mudi=del&dataType=newsWeb&dataTypeCN...

CVE-2024-35551

The cloud management agent system idcCMS (idccms) version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the component /admin/infoWeb_deal.php?mudi=add , which allows an attacker to perform malicious requests on behalf of a legitimate user. As a temporary workaroun...