CVE-2024-39155

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/ipRecorddeal.php?mudi=add...

CVE-2024-39155

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/ipRecorddeal.php?mudi=add...

PT-2024-28369 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is a Cross-Site Request Forgery CSRF that affects the component /admin/ipRecord deal.php with parameters mudi=del, dataType=, and dataID=1. This allows for unauthorized actions to be performed...

PT-2024-28367 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF in the /admin/ipRecord deal.php component when the mudi parameter is set to add. This allows for unauthorized actions to be performed. Recommendations:...