Lucene search
+L

3 matches found

NVD
NVD
•added 2024/05/22 2:15 p.m.•21 views

CVE-2024-35556

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/vpsSysdeal.php?mudi=infoSet...

8.8CVSS7.1AI score0.00295EPSS
SaveExploits1References1
CVE
CVE
•added 2024/05/22 1:38 p.m.•95 views

CVE-2024-35556

The idccms v1.35 cloud management agent system is vulnerable to a Cross-Site Request Forgery (CSRF) in the /admin/vpsSys_deal.php component when the mudi parameter is set to infoSet. This flaw allows an attacker to perform unauthorized requests on behalf of an authenticated user. As a temporary w...

7.8AI score0.00295EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/22 12:00 a.m.•1 views

CVE-2024-35556: Cross-Site Request Forgery (CSRF)

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/vpsSysdeal.php?mudi=infoSet...

8.8CVSS5.7AI score0.00295EPSS
SaveExploits1References1
Rows per page
Query Builder