Browse CVEs

MEDIUM 6.1 CVE-2024-11587 A vulnerability was found in idcCMS 1.60. It has been classified as problematic. This affects the function GetCityOptionJs of the file /inc/classProv… Idccms No fix yet Fix from $1,6002024-11-21 HIGH 8.8 CVE-2024-40331 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/dbBakMySQL_deal.php?mudi=backup Idccms No fix yet Fix from $1,9502024-07-10 HIGH 8.8 CVE-2024-40332 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/moneyRecord_deal.php?mudi=delRecord Idccms Mitigation only Fix from $1,9502024-07-10 MEDIUM 6.1 CVE-2024-40336 idccms v1.35 is vulnerable to Cross Site Scripting (XSS) within the 'Image Advertising Management.' Idccms No fix yet Fix from $1,6002024-07-10 HIGH 8.8 CVE-2024-40329 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=backup Idccms No fix yet Fix from $1,9502024-07-10 HIGH 8.8 CVE-2024-40333 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=del&dataID=2 Idccms No fix yet Fix from $1,9502024-07-10 HIGH 8.8 CVE-2024-40334 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/serverFile_deal.php?mudi=upFileDel&dataID=3 Idccms No fix yet Fix from $1,9502024-07-10 MEDIUM 6.3 CVE-2024-40328 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/memberOnline_deal.php?mudi=del&dataType=&dataID=6 Idccms No fix yet Fix from $1,6002024-07-10 HIGH 8.8 CVE-2024-40036 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_deal.php?mudi=add&nohrefStr=close Idccms No fix yet Fix from $1,9502024-07-09 MEDIUM 5.9 CVE-2024-40035 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userLevel_deal.php?mudi=add. Idccms No fix yet Fix from $1,6002024-07-09 MEDIUM 5.3 CVE-2024-40038 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userScore_deal.php?mudi=rev Idccms No fix yet Fix from $1,6002024-07-09 HIGH 8.8 CVE-2024-39022 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/infoSys_deal.php?mudi=deal Idccms No fix yet Fix from $1,9502024-07-05 HIGH 8.8 CVE-2024-39023 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/info_deal.php?mudi=add&nohrefStr=close Idccms No fix yet Fix from $1,9502024-07-05 MEDIUM 5.4 CVE-2024-39021 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsApiData_deal.php?mudi=del Idccms No fix yet Fix from $1,6002024-07-05 MEDIUM 6.3 CVE-2024-39020 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/vpsApiData_deal.php?mudi=rev&nohrefStr=close Idccms No fix yet Fix from $1,6002024-07-05 MEDIUM 5.4 CVE-2024-39019 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/idcProData_deal.php?mudi=del Idccms No fix yet Fix from $1,6002024-07-05 MEDIUM 5.4 CVE-2024-39119 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/info_deal.php?mudi=rev&nohrefStr=close. Idccms No fix yet Fix from $1,6002024-07-02 HIGH 8.8 CVE-2024-39158 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/userSys_deal.php?mudi=infoSet. Idccms No fix yet Fix from $1,9502024-06-27 HIGH 8.8 CVE-2024-39154 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord_deal.php?mudi=del&dataType=word&dataTypeC… Idccms No fix yet Fix from $1,9502024-06-27 MEDIUM 6.8 CVE-2024-39155 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ipRecord_deal.php?mudi=add. Idccms No fix yet Fix from $1,6002024-06-27 HIGH 8.8 CVE-2024-36670 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/vpsClass_deal.php?mudi=del Idccms No fix yet Fix from $1,9502024-06-05 HIGH 8.8 CVE-2024-36547 idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/vpsClass_deal.php?mudi=add Idccms No fix yet Fix from $1,9502024-06-04 HIGH 8.8 CVE-2024-36548 idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/vpsCompany_deal.php?mudi=del Idccms No fix yet Fix from $1,9502024-06-04 HIGH 8.8 CVE-2024-36549 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/vpsCompany_deal.php?mudi=rev&nohrefStr=close Idccms No fix yet Fix from $1,9502024-06-04 HIGH 8.8 CVE-2024-36550 idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/vpsCompany_deal.php?mudi=add&nohrefStr=close Idccms No fix yet Fix from $1,9502024-06-04 HIGH 8.8 CVE-2024-35552 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=del&dataType=logo&dataType… Idccms No fix yet Fix from $1,9502024-05-22 HIGH 8.8 CVE-2024-35556 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsSys_deal.php?mudi=infoSet. Idccms No fix yet Fix from $1,9502024-05-22 HIGH 8.8 CVE-2024-35558 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=rev&nohrefStr=close. Idccms No fix yet Fix from $1,9502024-05-22 HIGH 8.8 CVE-2024-35559 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=rev&nohrefStr=close. Idccms No fix yet Fix from $1,9502024-05-22 HIGH 8.3 CVE-2024-35553 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=add&nohrefStr=close. Idccms No fix yet Fix from $1,9502024-05-22