CVE-2024-40329: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/softBakdeal.php?mudi=backup...

PT-2024-28808

Name of the Vulnerable Software and Affected Versions idccms version 1.35 Description The issue is a Cross-Site Request Forgery CSRF vulnerability. It can be exploited via the "/admin/softBak deal.php" API endpoint, specifically when the mudi parameter is set to "backup". This allows an attacker ...