CVE-2024-35554

The idccms (Net Titanium IDC Cloud Management Agent System) version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) flaw within the /admin/infoWeb_deal.php component. Specifically, the mudi , dataType , and dataTypeCN parameters are involved, which could allow an attacker to perform una...

CVE-2024-35560

The Net Titanium Technology idcCMS (IDC Cloud Management Agent System) version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/ca_deal.php component, specifically when the mudi=del parameter is used with empty dataType and dataTypeCN variables. This vulne...

CVE-2024-35553

The idccms v1.35 cloud management agent system by Net Titanium Technology contains a Cross-Site Request Forgery (CSRF) vulnerability. The flaw is located in the /admin/infoMove_deal.php?mudi=add&nohrefStr=close component, which allows unauthorized requests to be made on behalf of a user. As a tem...

CVE-2024-35009

The idccms (Net Titanium IDC Cloud Management Brokerage System) version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/share_switch.php component, specifically when processing parameters such as mudi, dataType, fieldName, fieldName2, tabName, and dataID....

CVE-2024-35039

The idccms (Net Titanium IDC Cloud Management Agent System) version V1.35 is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability. The flaw is located in the admin/tplSys_deal.php?mudi=area endpoint, which could allow an attacker to perform unauthorized actions on behalf of a user wit...

CVE-2024-36670

The software idccms v1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) via the component admin/vpsClass_deal.php?mudi=del . This flaw allows an attacker to perform unauthorized requests on behalf of a legitimate user. As a temporary workaround, it is recommended to disable access to the a...

CVE-2024-35561

The Net Titanium Technology idcCMS (IDC Cloud Management Agent System) version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/ca_deal.php component, specifically involving the mudi and nohrefStr parameters. This vulnerability allows an attacker to perfor...

CVE-2024-34957

The software idccms v1.35 contains a Cross-Site Request Forgery (CSRF) vulnerability within the admin/sysImages_deal.php?mudi=infoSet component. This flaw allows an attacker to perform unauthorized actions on behalf of a user. As a temporary workaround, it is recommended to disable access to the ...

CVE-2024-35011

The idccms cloud management brokerage system (specifically version 1.35 ) is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/infoType_deal.php component when processing the mudi and nohrefStr parameters. This vulnerability allows for the execution of unauthorized...

CVE-2024-11587

CVE-2024-11587 affects idcCMS 1.60, specifically the GetCityOptionJs function in /inc/classProvCity.php, where manipulating the idName parameter triggers cross-site scripting. Exploitation can be remote; multiple sources flag XSS, with some templates noting a reflected XSS via idName (read.php). ...

CVE-2024-35552

The idccms v1.35 (Net Titanium IDC Cloud Management Agent System) is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. The flaw is located in the component /admin/infoMove_deal.php and can be triggered using the parameters mudi=del , dataType=logo , and dataTypeCN . This vulnerabil...

CVE-2024-35551

The idccms v1.35 (Net Titanium IDC Cloud Management Agent System) contains a Cross-Site Request Forgery (CSRF) vulnerability in the /admin/infoWeb_deal.php?mudi=add component. This flaw allows an attacker to perform malicious requests on behalf of a legitimate user. As a temporary workaround, it ...

CVE-2024-35550

The idccms v1.35 cloud management agent system is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/infoWeb_deal.php component, specifically when the mudi parameter is set to rev . This vulnerability allows an attacker to perform unauthorized requests on behalf of ...

CVE-2024-35556

The idccms v1.35 cloud management agent system is vulnerable to a Cross-Site Request Forgery (CSRF) in the /admin/vpsSys_deal.php component when the mudi parameter is set to infoSet. This flaw allows an attacker to perform unauthorized requests on behalf of an authenticated user. As a temporary w...

CVE-2022-27333

The CVE-2022-27333 issue affects idcCMS v1.10, where an attacker can arbitrarily delete the install.lock file, causing a reset of CMS settings and data. The vulnerability is described consistently across multiple sources as a deletion of install.lock, with no publicly detailed exploit chain beyon...

CVE-2024-39156

The idcCMS (Net Titanium IDC Cloud Management Proxy System) v1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/keyWord_deal.php component when the mudi parameter is set to add , allowing unauthorized requests to be made on behalf of a user. No official patc...

CVE-2024-39021

The idcCMS (Net Titanium IDC Cloud Management Proxy System) version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The vulnerability exists within the /admin/vpsApiData_deal.php component, specifically when the mudi parameter is set to del . This flaw allows an attacker to perf...

CVE-2024-35010

The idccms cloud management brokerage system (version 1.35 ) is vulnerable to a Cross-Site Request Forgery (CSRF) in the /admin/banner_deal.php component. An attacker can perform unauthorized actions by leveraging the mudi, dataType, dataTypeCN, theme, and dataID parameters. No patch is currently...

CVE-2024-39157

The idccms v1.35 (Net Titanium IDC Cloud Management Agent System) is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. The flaw exists in the component /admin/ipRecord_deal.php specifically when using the parameters mudi=del, dataType=, and dataID=1. This vulnerability allows an at...

CVE-2024-34958

The software idccms v1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) via the component admin/banner_deal.php?mudi=add. This flaw could allow an attacker to perform unauthorized actions within the application. As a temporary workaround, it is recommended to disable access to the admin/ba...

CVE-2024-39153

The idccms v1.35 (Net Titanium IDC Cloud Management Agent System) is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the component /admin/info_deal.php?mudi=del&dataType=news&dataTypeCN and involves the mudi, dataType, and dataTypeCN variables, allowing for unauthorized req...

CVE-2024-40329

The idcCMS (Net Titanium IDC Cloud Management Agent System) v1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) . This vulnerability is accessible via the /admin/softBak_deal.php?mudi=backup endpoint. No specific remediation steps or exploit links are provided in the documents, but the vul...

CVE-2024-39020

The Net Titanium Technology idcCMS (Idc Cloud Management Proxy System) version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The flaw exists in the /admin/vpsApiData_deal.php endpoint, specifically when the mudi and nohrefStr parameters are set to rev and close, respectively. ...

CVE-2024-4172

CVE-2024-4172 affects idcCMS 1.35. The vulnerability involves an unknown functionality at /admin/admin_cl.php?mudi=revPwd that enables cross-site request forgery. The issue can be exploited remotely and the exploit has been disclosed publicly (VDB-261991). Multiple connected records corroborate t...

CVE-2024-35557

The idccms v1.35 cloud management agent system contains a Cross-Site Request Forgery (CSRF) vulnerability in the /admin/vpsApi_deal.php component, specifically involving the mudi and nohrefStr parameters. This flaw allows an attacker to perform unauthorized requests on behalf of a user. As a temp...

CVE-2024-35559

The idccms (Net Titanium IDC Cloud Management Agent System) v1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/infoMove_deal.php component, specifically involving the mudi and nohrefStr parameters. This vulnerability allows an attacker to trigger unauthoriz...

CVE-2024-39155

The idcCMS (Net Titanium IDC Cloud Management Proxy System) v1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/ipRecord_deal.php component when the mudi parameter is set to add , potentially allowing an attacker to perform unauthorized actions. To mitigate ...

CVE-2024-33830

The idccms v1.35 cloud management agent system is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. The flaw exists within the /admin/readDeal.php component, specifically when the mudi parameter is set to clearWebCache , allowing an attacker to perform unauthorized actions on behal...

CVE-2024-35558

The idccms cloud management agent system (version 1.35 ) by Net Titanium Technology is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/ca_deal.php component, specifically involving the mudi and nohrefStr parameters, which allows for unauthorized requests. As a te...

CVE-2024-36547

CVE-2024-36547 affects idccms V1.35 with a Cross-Site Request Forgery (CSRF) in the admin/vpsClass_deal.php?mudi=add component. The CVSS baseline from NVD (ATT&CK not stated) indicates high impact on confidentiality, integrity, and availability with network attack vector and user interaction requ...

CVE-2024-39023

The idcCMS (Net Titanium IDC Cloud Management Proxy System) version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The flaw is accessible via the specific endpoint admin/info_deal.php?mudi=add&nohrefStr=close. While the vulnerability is confirmed, the provided documents do not ...

CVE-2024-40328

The idcCMS (Net Titanium IDC Cloud Management Agent System) v1.35 software is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. The flaw is accessible via the /admin/memberOnline_deal.php?mudi=del&dataType=&dataID=6 endpoint. Exploitation details or specific proof-of-concept links ...

CVE-2024-40035

The idccms v1.35 cloud management agent system, developed by Net Titanium Technology, is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/userLevel_deal.php?mudi=add endpoint, allowing attackers to submit malicious requests without the user's knowledge or consent....

CVE-2024-39019

The idcCMS (Net Titanium IDC Cloud Management Proxy System) version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The flaw exists in the /admin/idcProData_deal.php endpoint, specifically when the mudi parameter is set to del, potentially allowing an attacker to perform unautho...

CVE-2024-33829

The Net Titanium Technology idcCMS (Cloud Management Agent System) version 1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /admin/readDeal.php component, specifically when the mudi=updateWebCache parameter is used. This vulnerability allows for potential unautho...

CVE-2024-35012

The software idccms v1.35 (Net Titanium IDC Cloud Management Brokerage System) is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the component /admin/infoType_deal.php?mudi=add&nohrefStr=close . To mitigate the risk, it is recommended to disable access to the /admin/infoTy...

CVE-2024-35555

The idccms v1.35 cloud management agent system (from Net Titanium Technology, Inc.) is vulnerable to a Cross-Site Request Forgery (CSRF) flaw. The issue exists in the /admin/share_switch.php component, specifically involving parameters such as 怰mudi, dataType, fieldName, fieldName2, tabName, and ...

CVE-2024-40333

The idccms v1.35 (Net Titanium IDC Cloud Management Agent System) is affected by a Cross-Site Request Forgery (CSRF) vulnerability. The flaw is accessible via the endpoint /admin/softBak_deal.php?mudi=del&dataID=2. An attacker could potentially perform unauthorized actions on behalf of an authent...

CVE-2024-39154

The idcCMS (Net Titanium IDC Cloud Management Agent System) cloud management agent system, specifically version v1.35 , is vulnerable to a Cross-Site Request Forgery (CSRF) . This vulnerability exists in the component located at the /admin/keyWord_deal.php?mudi=del&dataType=word&dataTypeCN endpoi...

CVE-2024-40038

The idccms v1.35 (Net Titanium IDC Cloud Management Proxy System) contains a Cross-Site Request Forgery (CSRF) vulnerability. The flaw is reachable via the /admin/userScore_deal.php?mudi=rev endpoint. An attacker can exploit this to trick an authenticated user into performing unintended actions o...

CVE-2024-40334

idccms v1.35 contains a Cross-Site Request Forgery (CSRF) vulnerability affecting the endpoint /admin/serverFile_deal.php?mudi=upFileDel&dataID=3. The issue stems from CSRF in the admin file-deletion flow, with CVSS 3.1 base metrics indicating HIGH impact on confidentiality, integrity, and availa...

CVE-2024-36548

CVE-2024-36548 affects idccms v1.35, with a CSRF vulnerability reachable at admin/vpsCompany_deal.php?mudi=del. The issue is documented across multiple feeds (NVD/Red Hat/CVE pages and PT-2024-27066) and is not accompanied by public exploit details in the provided documents. PT-2024-27066 suggest...

CVE-2024-36549

CVE-2024-36549 affects idccms v1.35 with a Cross-Site Request Forgery (CSRF) vulnerability in the /admin/vpsCompany_deal.php?mudi=rev&nohrefStr=close endpoint. The connected PT-2024-27067 entry specifies the vulnerable software version (idccms 1.35) and identifies the CSRF issue related to the /a...

CVE-2024-40331

The Net Titanium Technology idcCMS (IDC Cloud Management Agent System) version v1.35 contains a Cross-Site Request Forgery (CSRF) vulnerability. The flaw is accessible via the /admin/dbBakMySQL_deal.php?mudi=backup endpoint. While the technical impact is noted as total in some metrics and a proof...

CVE-2024-39119

The idcCMS (Nettie IDC cloud management agent system) v1.35 is vulnerable to a Cross-Site Request Forgery (CSRF) . The root cause is that the admin/info_deal.php endpoint fails to adequately verify if a request originates from a trusted user. An attacker could exploit this by tricking a victim in...

CVE-2024-36550

CVE-2024-36550 affects idccms V1.35 and describes a Cross-Site Request Forgery (CSRF) vulnerability accessible via /admin/vpsCompany_deal.php?mudi=add&nohrefStr=close. The NVD entry lists CVSSv3.1 scores of 8.8 (HIGH) for the NVD view with network attack vector, user interaction required, and hig...

CVE-2024-40036

The idcCMS (Net Titanium IDC Cloud Management Agent System) software version v1.35 is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability. This flaw is accessible via the /admin/userGroup_deal.php?mudi=add&nohrefStr=close endpoint. The vulnerability allows an attacker to potentially ...

CVE-2024-40336

The Net Titanium Technology idcCMS (Net Titanium IDC Cloud Management Agent System) v1.35 is vulnerable to Cross-Site Scripting (XSS) . The flaw exists specifically within the Image Advertising Management component, where the software fails to properly neutralize input during web page generation....

CVE-2024-39022

The Net Titanium Technology idcCMS (Net Titanium IDC Cloud Management Proxy System) cloud management proxy system, specifically version 1.35 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The vulnerability exists via the /admin/infoSys_deal.php endpoint when the mudi parameter is ...

CVE-2024-40332

CVE-2024-40332 concerns idccms v1.35, which is affected by a CSRF flaw exploitable via the endpoint /admin/moneyRecord_deal.php?mudi=delRecord. The available documents consistently describe a CSRF vulnerability enabling unauthorized actions on the system, with no explicit exploit code or in‑the‑w...