EUVD-2025-147327

Malicious code in uaragia-mudi-syuf npm...

CVE-2023-24261

A vulnerability in GL.iNET GL-E750 Mudi before firmware v3.216 allows authenticated attackers to execute arbitrary code via a crafted POST request...

CVE-2025-2811: Inefficient Regular Expression Complexity

A vulnerability was found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mango, GL-MT1300 Beryl, GL-MT250...

PT-2024-28813 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in idccms. The vulnerability can be exploited via the "/admin/serverFile deal.php" endpoint, specifically when the mudi parameter is set to "upFileDel" an...

CVE-2024-40332: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/moneyRecorddeal.php?mudi=delRecord...

PT-2024-28808

Name of the Vulnerable Software and Affected Versions idccms version 1.35 Description The issue is a Cross-Site Request Forgery CSRF vulnerability. It can be exploited via the "/admin/softBak deal.php" API endpoint, specifically when the mudi parameter is set to "backup". This allows an attacker ...

PT-2024-28810

Name of the Vulnerable Software and Affected Versions idccms version 1.35 Description A Cross-Site Request Forgery CSRF issue was discovered in idccms. The vulnerability can be exploited via the "/admin/dbBakMySQL deal.php" endpoint, specifically when the mudi parameter is set to "backup"...

PT-2024-28812

Name of the Vulnerable Software and Affected Versions idccms version 1.35 Description A Cross-Site Request Forgery CSRF issue was discovered in idccms. The issue is related to the API endpoint "/admin/softBak deal.php" with parameters mudi and dataID. This allows for potential unauthorized action...

CVE-2024-40329: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/softBakdeal.php?mudi=backup...

PT-2024-28807

Name of the Vulnerable Software and Affected Versions idccms version 1.35 Description A Cross-Site Request Forgery CSRF issue was discovered in idccms. The vulnerability can be exploited via the "/admin/memberOnline deal.php" API endpoint with specific parameters such as mudi, dataType, and dataI...

PT-2024-28762 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in idccms. The issue is related to the "/admin/userLevel deal.php?mudi=add" endpoint. This allows for potentially malicious requests to be made without th...

PT-2024-28765 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This vulnerability can be exploited via the "/admin/userScore deal.php" endpoint, specifically when the mudi parameter is set to "rev"...

PT-2024-28763

Name of the Vulnerable Software and Affected Versions idccms version 1.35 Description A Cross-Site Request Forgery CSRF issue was discovered in idccms. The vulnerability can be exploited via the "/admin/userGroup deal.php" endpoint with specific parameters mudi and nohrefStr. This allows for...

CVE-2024-40034

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userLeveldeal.php?mudi=del...

PT-2024-28764 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was found in idccms. The issue is related to the "/admin/userScore deal.php" API endpoint, specifically with the mudi parameter set to "del". This allows for unauthorize...

PT-2024-28761 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in idccms. The issue is related to the "/admin/userLevel deal.php" API endpoint, specifically with the mudi parameter when set to "del". This allows for...

CVE-2024-40034: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userLeveldeal.php?mudi=del...

CVE-2024-40035: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userLeveldeal.php?mudi=add...

CVE-2024-40037: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userScoredeal.php?mudi=del...

CVE-2024-40039: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userGroupdeal.php?mudi=del...