CVE-2024-33829

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/readDeal.php?mudi=updateWebCache...

PT-2024-25500 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: A Cross-Site Request Forgery CSRF issue was discovered in the component /admin/readDeal.php?mudi=updateWebCache. This issue allows for potential exploitation. Recommendations: For idccms version 1.35, consider...

CVE-2024-33830

CVE-2024-33830 affects idccms v1.35, where a Cross-Site Request Forgery (CSRF) is possible through the /admin/readDeal.php?mudi=clearWebCache component. The root cause is CSRF in the readDeal.php path, enabling unauthorized actions on behalf of an authenticated user. Impact is described as HIGH (...

CVE-2024-33830

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/readDeal.php?mudi=clearWebCache...

CVE-2024-33829

CVE-2024-33829 affects idccms v1.35, with a Cross-Site Request Forgery (CSRF) in the component accessible at /admin/readDeal.php?mudi=updateWebCache. The vulnerability is described across multiple sources as CSRF via that parameter; the NVD/CVE entry lists a CVSS v3.1 base score of 5.4 (Medium) w...

Path traversal

A vulnerability, which was classified as problematic, was found in OTCMS up to 6.62. Affected is an unknown function of the file admin/readDeal.php?mudi=readQrCode. The manipulation of the argument img leads to path traversal: '../filedir'. The exploit has been disclosed to the public and may be...

CVE-2023-3239 OTCMS path traversal

A vulnerability, which was classified as problematic, was found in OTCMS up to 6.62. Affected is an unknown function of the file admin/readDeal.php?mudi=readQrCode. The manipulation of the argument img leads to path traversal: '../filedir'. The exploit has been disclosed to the public and may be...

CVE-2023-3239

CVE-2023-3239 affects OTCMS up to version 6.62. Affected is an unknown function in admin/readDeal.php?mudi=readQrCode; manipulating the img parameter can trigger path traversal to ../filedir. The vulnerability has been publicly disclosed. Multiple connected sources (Red Hat, PRION, PT Security, C...