Search vulnerabilities

Results 44

Export CSV
CVE-2024-34957

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/sysImages_deal.php?mudi=infoSet.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Products
CVE-2024-35011

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoType_deal.php?mudi=rev&nohrefStr=close.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Products
CVE-2024-35012

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoType_deal.php?mudi=add&nohrefStr=close.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Products
CVE-2024-35108

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/homePro_deal.php?mudi=del&dataType=&dataTypeCN.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Products
CVE-2024-35109

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /homePro_deal.php?mudi=add&nohrefStr=close.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Products
CVE-2024-39020

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/vpsApiData_deal.php?mudi=rev&nohrefStr=close

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Products
CVE-2024-39023

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/info_deal.php?mudi=add&nohrefStr=close

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Products
CVE-2024-39153

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/info_deal.php?mudi=del&dataType=news&dataTypeCN.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Products
CVE-2024-39154

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord_deal.php?mudi=del&dataType=word&dataTypeCN.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Products
CVE-2024-39157

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ipRecord_deal.php?mudi=del&dataType=&dataID=1.

CVSS 3.1 · 3.8 Low EPSS < 1% KEV · Not listed
Products
CVE-2024-40036

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_deal.php?mudi=add&nohrefStr=close

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Products