CVE-2024-40036

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userGroupdeal.php?mudi=add&nohrefStr=close...

CVE-2024-40039

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userGroupdeal.php?mudi=del...

CVE-2024-40039: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userGroupdeal.php?mudi=del...

CVE-2024-40036

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userGroupdeal.php?mudi=add&nohrefStr=close...

CVE-2024-40039

idccms v1.35 is affected by a CSRF vulnerability in the /admin/userGroup_deal.php?mudi=del endpoint, enabling unauthorized actions. The CVE has a high severity (CVE/NVD 8.8) with network attack vector, low complexity and user interaction required. No exploit details are provided in the documents....

CVE-2024-40036: Improper Neutralization of Input During Web Page Generation

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/userGroupdeal.php?mudi=add&nohrefStr=close...

CVE-2024-40036

The idccms v1.35 cloud management agent system (Net Titanium Technology) is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/userGroup_deal.php endpoint when using the mudi and nohrefStr parameters, which can allow an attacker to perform unauthorized actions on be...