Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9
Exploited now
Idccms Project records in CISA KEVNo Idccms Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 73
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_deal.php?mudi=del
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00295 · Published 2024-07-09 · No fix listed CWE-352
Priority HIGH 73
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userScore_deal.php?mudi=del
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00295 · Published 2024-07-09 · No fix listed CWE-352
Priority HIGH 73
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userLevel_deal.php?mudi=del
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00295 · Published 2024-07-09 · No fix listed CWE-352
Priority HIGH 71
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/type_deal.php?mudi=add.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00234 · Published 2024-06-05 · No fix listed CWE-352
Priority HIGH 71
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/type_deal.php?mudi=del
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0023 · Published 2024-06-05 · No fix listed CWE-352
Priority HIGH 71
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/idcProType_deal.php?mudi=add&nohrefStr=close
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00241 · Published 2024-06-05 · No fix listed CWE-352
THREATIST.IORead the docs