PT-2024-28763

Name of the Vulnerable Software and Affected Versions idccms version 1.35 Description A Cross-Site Request Forgery CSRF issue was discovered in idccms. The vulnerability can be exploited via the "/admin/userGroup deal.php" endpoint with specific parameters mudi and nohrefStr. This allows for...