CVE-2024-35554

The idcCMS (Net Titanium IDC Cloud Management Agent System) version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/infoWeb_deal.php component, specifically involving the mudi , dataType , and dataTypeCN parameters. An attacker could leverage this vulnera...

CVE-2024-35560

The idccms v1.35 cloud management agent system by Net Titanium Technology contains a Cross-Site Request Forgery (CSRF) vulnerability. The flaw exists in the /admin/ca_deal.php component, specifically when the mudi=del parameter is used with empty dataType and dataTypeCN variables. This vulnerabil...

CVE-2024-35553

The idccms v1.35 (IDC Cloud Management Agent System) by Net Titanium Technology contains a Cross-Site Request Forgery (CSRF) vulnerability in the component /admin/infoMove_deal.php?mudi=add&nohrefStr=close. This flaw allows an attacker to perform unauthorized requests on behalf of a user. As a te...

CVE-2024-35009

The idccms (Net Titanium IDC Cloud Management Brokerage System) version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/share_switch.php component, specifically when processing parameters such as mudi, dataType, fieldName, fieldName2, tabName, and dataID....

CVE-2024-35039

The idcCMS (Net Titanium IDC Cloud Management Agent System) cloud management agent system, version V1.35 , is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw originates from the admin/tplSys_deal.php endpoint, specifically when the mudi=area parameter is used. This vulnerability allo...

CVE-2024-36670

The software idccms v1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) issue within the admin/vpsClass_deal.php?mudi=del component. This vulnerability allows for unauthorized requests to be made on behalf of the user. As a temporary workaround, users are advised to disable access to the a...

CVE-2024-35561

The idccms (Net Titanium IDC Cloud Management Agent System) version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=add&nohrefStr=close. This vulnerability allows an attacker to perform unauthorized actions on behalf of a user. As a temporary wo...

CVE-2024-34957

The software idccms version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability within the admin/sysImages_deal.php?mudi=infoSet component. This flaw allows an attacker to perform unauthorized actions on behalf of a user. As a temporary workaround, it is recommended to disable...

CVE-2024-39156

idcCMS (Net Titanium IDC Cloud Management Proxy System) version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/keyWord_deal.php component when the mudi parameter is set to add , potentially allowing unauthorized requests to be made on behalf of a user. A...

CVE-2024-35552

The idccms v1.35 (IDC Cloud Management Agent System) by Net Titanium Technology contains a Cross-Site Request Forgery (CSRF) vulnerability within the /admin/infoMove_deal.php component. Specifically, the vulnerability is triggered via the parameters mudi=del, dataType=logo, and dataTypeCN, which ...

CVE-2024-39021

The idcCMS (Net Titanium IDC Cloud Management Proxy System) cloud management proxy system, specifically version 1.35 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The flaw exists in the /admin/vpsApiData_deal.php component when the mudi parameter is set to del . This vulnerabilit...

CVE-2024-11587

CVE-2024-11587 affects idcCMS 1.60, specifically the GetCityOptionJs function in /inc/classProvCity.php, where manipulating the idName parameter triggers cross-site scripting. Exploitation can be remote; multiple sources flag XSS, with some templates noting a reflected XSS via idName (read.php). ...

CVE-2024-35011

The idccms cloud management brokerage system (specifically version 1.35 ) is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/infoType_deal.php component through the mudi and nohrefStr parameters, which can lead to unauthorized requests. While version 1.36 is ment...

CVE-2024-35551

The cloud management agent system idcCMS (idccms) version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the component /admin/infoWeb_deal.php?mudi=add , which allows an attacker to perform malicious requests on behalf of a legitimate user. As a temporary workaroun...

CVE-2022-27333

The CVE-2022-27333 issue affects idcCMS v1.10, where an attacker can arbitrarily delete the install.lock file, causing a reset of CMS settings and data. The vulnerability is described consistently across multiple sources as a deletion of install.lock, with no publicly detailed exploit chain beyon...

CVE-2024-35550

The idccms v1.35 cloud management agent system is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. The flaw exists in the /admin/infoWeb_deal.php component, specifically when the mudi parameter is set to rev . This vulnerability allows an attacker to perform unauthorized requests ...

CVE-2024-35556

idccms v1.35 , a cloud management agent system from Net Titanium Technology, contains a Cross-Site Request Forgery (CSRF) vulnerability. The flaw exists in the /admin/vpsSys_deal.php component when the mudi parameter is set to infoSet . This vulnerability allows for unauthorized requests to be ma...

CVE-2024-39157

The Net Titanium Technology idcCMS (IDC Cloud Management Agent System) v1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. This issue exists in the /admin/ipRecord_deal.php component, specifically when utilizing the parameters mudi=del, dataType=, and dataID=1. This flaw all...

CVE-2024-35010

The idccms cloud management brokerage system (version 1.35 ) by Net Titanium Technology, Inc. is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/banner_deal.php component and involves the mudi, dataType, dataTypeCN, theme, and dataID parameters, potentially allow...

CVE-2024-39020

The Net Titanium Technology idcCMS (Idc Cloud Management Proxy System) version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The flaw exists in the /admin/vpsApiData_deal.php endpoint, specifically when the mudi and nohrefStr parameters are set to rev and close, respectively. ...

CVE-2024-34958

The software idccms version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) via the component admin/banner_deal.php?mudi=add. This vulnerability allows for potential unauthorized actions by an attacker. As a temporary workaround, users should disable access to the admin/banner_deal.php ...

CVE-2024-39153

The idccms v1.35 (Net Titanium IDC Cloud Management Agent System) is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the component /admin/info_deal.php?mudi=del&dataType=news&dataTypeCN and involves the mudi, dataType, and dataTypeCN variables, allowing for unauthorized req...

CVE-2024-40329

The idccms v1.35 cloud management agent system is vulnerable to a Cross-Site Request Forgery (CSRF) . This vulnerability exists in the /admin/softBak_deal.php API endpoint, specifically when the mudi parameter is set to backup . An attacker could exploit this to perform unauthorized actions on th...

CVE-2024-4172

CVE-2024-4172 affects idcCMS 1.35. The vulnerability involves an unknown functionality at /admin/admin_cl.php?mudi=revPwd that enables cross-site request forgery. The issue can be exploited remotely and the exploit has been disclosed publicly (VDB-261991). Multiple connected records corroborate t...

CVE-2024-39155

The idccms v1.35 (Net Titanium IDC Cloud Management Proxy System) is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/ipRecord_deal.php component when the mudi parameter is set to add , potentially allowing an attacker to perform unauthorized actions. No specific ...

CVE-2024-33830

The idccms v1.35 cloud management agent system is vulnerable to a Cross-Site Request Forgery (CSRF) flaw in the /admin/readDeal.php component. Specifically, an attacker can exploit the mudi parameter when set to clearWebCache to perform unauthorized actions on behalf of a user. As a temporary wor...

CVE-2024-36547

CVE-2024-36547 affects idccms V1.35 with a Cross-Site Request Forgery (CSRF) in the admin/vpsClass_deal.php?mudi=add component. The CVSS baseline from NVD (ATT&CK not stated) indicates high impact on confidentiality, integrity, and availability with network attack vector and user interaction requ...

CVE-2024-39023

The idcCMS (Net Titanium IDC Cloud Management Proxy System) version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. The flaw is accessible via the admin/info_deal.php?mudi=add&nohrefStr=close endpoint. This vulnerability allows an attacker to perform unauthorized actions ...

CVE-2024-35559

The idccms v1.35 cloud management agent system (by Net Titanium Technology) is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/infoMove_deal.php component, specifically involving the mudi and nohrefStr parameters. This vulnerability could allow an attacker to per...

CVE-2024-35557

The idccms v1.35 cloud management agent system, developed by Net Titanium Technology, is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the component /admin/vpsApi_deal.php?mudi=rev&nohrefStr=close , which can allow an attacker to perform unauthorized requests on behalf of...

CVE-2024-40328

The Net Titanium Technology idcCMS (Net Titanium IDC Cloud Management Agent System) version v1.35 is affected by a Cross-Site Request Forgery (CSRF) vulnerability. The flaw is accessible via the endpoint /admin/memberOnline_deal.php?mudi=del&dataType=&dataID=6. This vulnerability allows an attack...

CVE-2024-40333

The idccms v1.35 (Net Titanium IDC Cloud Management Agent System) is affected by a Cross-Site Request Forgery (CSRF) vulnerability. The flaw is accessible via the endpoint /admin/softBak_deal.php?mudi=del&dataID=2. An attacker could potentially perform unauthorized actions on behalf of an authent...

CVE-2024-35012

The idccms v1.35 cloud management brokerage system (by Net Titanium Technology, Inc.) is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the component /admin/infoType_deal.php?mudi=add&nohrefStr=close . An attacker could potentially leverage this to perform unauthorized act...

CVE-2024-40334

idccms v1.35 contains a Cross-Site Request Forgery (CSRF) vulnerability affecting the endpoint /admin/serverFile_deal.php?mudi=upFileDel&dataID=3. The issue stems from CSRF in the admin file-deletion flow, with CVSS 3.1 base metrics indicating HIGH impact on confidentiality, integrity, and availa...

CVE-2024-35558

The idccms v1.35 (Net Titanium IDC Cloud Management Agent System) contains a Cross-Site Request Forgery (CSRF) vulnerability in the /admin/ca_deal.php component. This issue specifically involves the mudi and nohrefStr parameters, which can be exploited to perform unauthorized requests . While no ...

CVE-2024-39019

The idcCMS (Net Titanium IDC Cloud Management Proxy System) version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The flaw exists in the /admin/idcProData_deal.php endpoint, specifically when the mudi parameter is set to del, potentially allowing an attacker to perform unautho...

CVE-2024-40035

The idccms v1.35 cloud management agent system, developed by Net Titanium Technology, is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/userLevel_deal.php?mudi=add endpoint, allowing attackers to submit malicious requests without the user's knowledge or consent....

CVE-2024-33829

The idccms v1.35 cloud management agent system is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The flaw exists in the /admin/readDeal.php?mudi=updateWebCache component. This vulnerability allows an attacker to potentially perform unauthorized actions by tricking a logged-in administr...

CVE-2024-39154

The idcCMS (Net Titanium IDC Cloud Management Agent System) cloud management agent system, specifically version v1.35 , is vulnerable to a Cross-Site Request Forgery (CSRF) . This vulnerability exists in the component located at the /admin/keyWord_deal.php?mudi=del&dataType=word&dataTypeCN endpoi...

CVE-2024-40331

The idccms v1.35 cloud management agent system is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/dbBakMySQL_deal.php endpoint when the mudi parameter is set to backup . This vulnerability allows an attacker to perform unauthorized actions on behalf of an authent...

CVE-2024-35555

The idccms v1.35 (Net Titanium IDC Cloud Management Agent System) is vulnerable to a Cross-Site Request Forgery (CSRF) via the /admin/share_switch.php component. The vulnerability specifically involves parameters such as mudi, dataType, fieldName, fieldName2, tabName, and dataID, potentially allo...

CVE-2024-36548

CVE-2024-36548 affects idccms v1.35, with a CSRF vulnerability reachable at admin/vpsCompany_deal.php?mudi=del. The issue is documented across multiple feeds (NVD/Red Hat/CVE pages and PT-2024-27066) and is not accompanied by public exploit details in the provided documents. PT-2024-27066 suggest...

CVE-2024-39119

The idcCMS (Nettie IDC cloud management agent system) v1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the admin/info_deal.php endpoint because the system fails to adequately verify if requests originate from a trusted user. An attacker could exploit this by forging...

CVE-2024-40038

The idccms v1.35 cloud management proxy system is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. The flaw exists in the /admin/userScore_deal.php endpoint, specifically when the mudi parameter is set to rev . An attacker can trick an authenticated user into performing unintended...

CVE-2024-36550

CVE-2024-36550 affects idccms V1.35 and describes a Cross-Site Request Forgery (CSRF) vulnerability accessible via /admin/vpsCompany_deal.php?mudi=add&nohrefStr=close. The NVD entry lists CVSSv3.1 scores of 8.8 (HIGH) for the NVD view with network attack vector, user interaction required, and hig...

CVE-2024-36549

CVE-2024-36549 affects idccms v1.35 with a Cross-Site Request Forgery (CSRF) vulnerability in the /admin/vpsCompany_deal.php?mudi=rev&nohrefStr=close endpoint. The connected PT-2024-27067 entry specifies the vulnerable software version (idccms 1.35) and identifies the CSRF issue related to the /a...

CVE-2024-39022

The Net Titanium Technology idcCMS (Net Titanium IDC Cloud Management Proxy System) cloud management proxy system, specifically version 1.35 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The vulnerability exists via the /admin/infoSys_deal.php endpoint when the mudi parameter is ...

CVE-2024-40332

CVE-2024-40332 concerns idccms v1.35, which is affected by a CSRF flaw exploitable via the endpoint /admin/moneyRecord_deal.php?mudi=delRecord. The available documents consistently describe a CSRF vulnerability enabling unauthorized actions on the system, with no explicit exploit code or in‑the‑w...

CVE-2024-39158

The idccms v1.35 cloud management agent system is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/userSys_deal.php?mudi=infoSet component, which could allow an attacker to perform unauthorized actions on the affected system. As a temporary workaround, it is recom...

CVE-2024-40336

The Net Titanium Technology idcCMS (Net Titanium IDC Cloud Management Agent System) v1.35 is vulnerable to Cross-Site Scripting (XSS) . The flaw exists specifically within the Image Advertising Management component, where the software fails to properly neutralize input during web page generation....