CVE-2024-35556

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/vpsSysdeal.php?mudi=infoSet...

CVE-2024-35556

CVE-2024-35556 affects idccms v1.35. The vulnerability is a Cross-Site Request Forgery (CSRF) in the component /admin/vpsSys_deal.php?mudi=infoSet. This is the underlying cause: unauthorized requests may be performed via the mudi parameter. CVSS v3.1 base score 8.8 (High) with network attack vect...