Idccms

Records53All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high25CVSS 7.0–8.9

Exploited now

Idccms records in CISA KEV

No Idccms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Idccms 53 records HIGH

Records

53 records

TI-2024-23469 CVE-2024-35553 · GHSA-9rr6-j7h7-p29p

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…

HIGH 75

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=add&nohrefStr=close.

CVSS 3.1HIGH 8.3 Network No auth No interaction EPSS 0.00225 Published 2024-05-22 No fix listed CWE-352

TI-2024-26896 CVE-2024-40334 · GHSA-p9qx-gfwc-8q38

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability…

HIGH 73

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/serverFile_deal.php?mudi=upFileDel&dataID=3

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00295 Published 2024-07-10 No fix listed CWE-352

TI-2024-26895 CVE-2024-40333 · GHSA-q4qc-g79m-gvh2

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability…

HIGH 73

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=del&dataID=2

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00601 Published 2024-07-10 No fix listed CWE-79

TI-2024-26893 CVE-2024-40331 · GHSA-63fx-4x42-65f2

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability…

HIGH 73

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/dbBakMySQL_deal.php?mudi=backup

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00301 Published 2024-07-10 No fix listed CWE-352

TI-2024-26892 CVE-2024-40329 · GHSA-gx86-j6ch-gp6g

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability…

HIGH 73

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=backup

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00295 Published 2024-07-10 No fix listed CWE-352

TI-2024-26845 CVE-2024-40036 · GHSA-22m8-p76h-g65g

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability…

HIGH 73

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_deal.php?mudi=add&nohrefStr=close

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00601 Published 2024-07-09 No fix listed CWE-79

TI-2024-26195 CVE-2024-39158 · GHSA-48f2-r22m-c3xq

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…

HIGH 73

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/userSys_deal.php?mudi=infoSet.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00296 Published 2024-06-27 No fix listed CWE-352

TI-2024-26191 CVE-2024-39154 · GHSA-vwhp-3xvr-4jc2

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…

HIGH 73

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord_deal.php?mudi=del&dataType=word&dataTypeCN.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00296 Published 2024-06-27 No fix listed CWE-352

TI-2024-26158 CVE-2024-39023 · GHSA-fx4g-2qhw-fqxx

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability…

HIGH 73

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/info_deal.php?mudi=add&nohrefStr=close

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00296 Published 2024-07-05 No fix listed CWE-352

TI-2024-26157 CVE-2024-39022 · GHSA-78f6-8cx3-2458

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability…

HIGH 73

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/infoSys_deal.php?mudi=deal

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00296 Published 2024-07-05 No fix listed CWE-352

TI-2024-24365 CVE-2024-36670 · GHSA-f935-6jhc-wv29

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…

HIGH 73

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/vpsClass_deal.php?mudi=del

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00289 Published 2024-06-05 No fix listed CWE-352

TI-2024-24315 CVE-2024-36549 · GHSA-w835-4fh5-99v9

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via…

HIGH 73

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/vpsCompany_deal.php?mudi=rev&nohrefStr=close

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00296 Published 2024-06-04 No fix listed CWE-352

TI-2024-23472 CVE-2024-35556 · GHSA-v5r5-978f-9w52

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…

HIGH 73

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsSys_deal.php?mudi=infoSet.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00295 Published 2024-05-22 No fix listed CWE-352

TI-2024-23202 CVE-2024-35108 · GHSA-jqcw-w3rj-6rhg

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…

HIGH 73

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/homePro_deal.php?mudi=del&dataType=&dataTypeCN.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00329 Published 2024-05-15 No fix listed CWE-352

TI-2024-23176 CVE-2024-35010 · GHSA-qvvh-gx47-g435

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…

HIGH 73

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/banner_deal.php?mudi=del&dataType=&dataTypeCN=%E5%9B%BE%E7%89%87%E5%B9%BF%E5%91%8A&theme=cs&dataID=6.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00301 Published 2024-05-14 No fix listed CWE-352

TI-2024-23175 CVE-2024-35009 · GHSA-c473-m4mh-crhw

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…

HIGH 73

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/share_switch.php?mudi=switch&dataType=&fieldName=state&fieldName2=state&tabName=banner&dataID=6.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00301 Published 2024-05-14 No fix listed CWE-352

TI-2024-26894 CVE-2024-40332 · GHSA-v458-23rq-7r33

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability…

HIGH 71

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/moneyRecord_deal.php?mudi=delRecord

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00222 Published 2024-07-10 No fix listed CWE-352

TI-2024-24316 CVE-2024-36550 · GHSA-mq9m-c33f-xf29

idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via…

HIGH 71

idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/vpsCompany_deal.php?mudi=add&nohrefStr=close

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00225 Published 2024-06-04 No fix listed CWE-352

TI-2024-24314 CVE-2024-36548 · GHSA-9qpj-gvc6-34rv

idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/vpsCompany_deal.php?mudi=del

HIGH 71

idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/vpsCompany_deal.php?mudi=del

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0023 Published 2024-06-04 No fix listed CWE-352

TI-2024-24313 CVE-2024-36547 · GHSA-8w2q-mh8v-whx2

idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…

HIGH 71

idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/vpsClass_deal.php?mudi=add

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00225 Published 2024-06-04 No fix listed CWE-352

TI-2024-23468 CVE-2024-35552 · GHSA-j9h6-5r2h-wq4m

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…

HIGH 71

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=del&dataType=logo&dataTypeCN.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00289 Published 2024-05-22 No fix listed CWE-352

TI-2024-23203 CVE-2024-35109 · GHSA-hx7q-82h5-f6mc

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…

MEDIUM 64

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /homePro_deal.php?mudi=add&nohrefStr=close.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0019 Published 2024-05-15 No fix listed CWE-352

TI-2024-26192 CVE-2024-39155 · GHSA-7883-qjph-588g

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…

MEDIUM 63

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ipRecord_deal.php?mudi=add.

CVSS 3.1MEDIUM 6.8 Network Low privileges User interaction EPSS 0.00205 Published 2024-06-27 No fix listed CWE-352

TI-2024-26891 CVE-2024-40328 · GHSA-x6fc-g9vq-7q2g

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability…

MEDIUM 61

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/memberOnline_deal.php?mudi=del&dataType=&dataID=6

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00192 Published 2024-07-10 No fix listed CWE-352

TI-2024-26155 CVE-2024-39020 · GHSA-h5x8-8jch-fmhv

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability…

MEDIUM 61

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/vpsApiData_deal.php?mudi=rev&nohrefStr=close

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00192 Published 2024-07-05 No fix listed CWE-352

Open these records in search →

Critical	0
High	25
Medium	25
Low	3
No CVSS	0