Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 54

Export CSV
CVE-2024-35555

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/share_switch.php?mudi=switch&dataType=newsWeb&fieldName=state&fieldName2=state&tabName=infoWeb&dataID=40.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-35556

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsSys_deal.php?mudi=infoSet.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Idccms
Products
Idccms
CVE-2024-35557

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsApi_deal.php?mudi=rev&nohrefStr=close.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-35558

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=rev&nohrefStr=close.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-35559

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=rev&nohrefStr=close.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-35560

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=del&dataType=&dataTypeCN.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-35561

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=add&nohrefStr=close.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-36550

idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/vpsCompany_deal.php?mudi=add&nohrefStr=close

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Idccms
Products
Idccms
CVE-2024-36549

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/vpsCompany_deal.php?mudi=rev&nohrefStr=close

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Idccms
Products
Idccms
CVE-2024-36547

idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/vpsClass_deal.php?mudi=add

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Idccms
Products
Idccms
CVE-2024-11587

idcCMS classProvCity.php GetCityOptionJs cross site scripting

A vulnerability was found in idcCMS 1.60. It has been classified as problematic. This affects the function GetCityOptionJs of the file /inc/classProvCity.php. The manipulation of the argument idName leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms
Products
Idccms
CVE-2024-40334

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/serverFile_deal.php?mudi=upFileDel&dataID=3

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-40332

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/moneyRecord_deal.php?mudi=delRecord

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms