12 matches found
CVE-2024-40035: Cross-Site Request Forgery (CSRF)
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userLeveldeal.php?mudi=add...
CVE-2024-39156
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/keyWorddeal.php?mudi=add...
CVE-2024-39155: Cross-Site Request Forgery (CSRF)
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/ipRecorddeal.php?mudi=add...
CVE-2024-39156: Cross-Site Request Forgery (CSRF)
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/keyWorddeal.php?mudi=add...
CVE-2024-36669
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/typedeal.php?mudi=add...
CVE-2024-36667: Cross-Site Request Forgery (CSRF)
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/idcProTypedeal.php?mudi=add&nohrefStr=close...
CVE-2024-36669: Cross-Site Request Forgery (CSRF)
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/typedeal.php?mudi=add...
CVE-2024-35553: Cross-Site Request Forgery (CSRF)
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoMovedeal.php?mudi=add&nohrefStr=close...
CVE-2024-35551: Cross-Site Request Forgery (CSRF)
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoWebdeal.php?mudi=add...
CVE-2024-34958: Cross-Site Request Forgery (CSRF)
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component admin/bannerdeal.php?mudi=add...
CVE-2024-35109: Cross-Site Request Forgery (CSRF)
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /homeProdeal.php?mudi=add&nohrefStr=close...
CVE-2018-8973: Improper Neutralization of Input During Web Page Generation
OTCMS 3.20 allows XSS by adding a keyword or link to an article, as demonstrated by an admin/keyWorddeal.php?mudi=add request...