CVE-2024-35557

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/vpsApideal.php?mudi=rev&nohrefStr=close...

CVE-2024-35557

CVE-2024-35557 affects idccms v1.35, with a CSRF vulnerability in the admin endpoint /admin/vpsApi_deal.php?mudi=rev&nohrefStr=close. The root cause is a cross-site request forgery in the component handling the vpsApi_deal action, potentially enabling unauthorized actions on behalf of an authenti...