Vulnerabilities

TI-2024-10736 CVE-2024-11587

idcCMS classProvCity.php GetCityOptionJs cross site scripting

MEDIUM 57

A vulnerability was found in idcCMS 1.60.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00964 Published 2024-11-21 No fix listed CWE-79

TI-2024-26897 CVE-2024-40336 · GHSA-rxq5-6v7m-86hq

idccms v1.35 is vulnerable to Cross Site Scripting (XSS) within the 'Image Advertising Management.'

MEDIUM 60

idccms v1.35 is vulnerable to Cross Site Scripting (XSS) within the 'Image Advertising Management.'

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00362 Published 2024-07-10 No fix listed CWE-79

TI-2024-26896 CVE-2024-40334 · GHSA-p9qx-gfwc-8q38

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability…

HIGH 73

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/serverFile_deal.php?mudi=upFileDel&dataID=3

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00295 Published 2024-07-10 No fix listed CWE-352

TI-2024-26895 CVE-2024-40333 · GHSA-q4qc-g79m-gvh2

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability…

HIGH 73

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=del&dataID=2

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00601 Published 2024-07-10 No fix listed CWE-79

TI-2024-26894 CVE-2024-40332 · GHSA-v458-23rq-7r33

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability…

HIGH 71

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/moneyRecord_deal.php?mudi=delRecord

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00222 Published 2024-07-10 No fix listed CWE-352

TI-2024-26893 CVE-2024-40331 · GHSA-63fx-4x42-65f2

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability…

HIGH 73

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/dbBakMySQL_deal.php?mudi=backup

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00301 Published 2024-07-10 No fix listed CWE-352

TI-2024-26892 CVE-2024-40329 · GHSA-gx86-j6ch-gp6g

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability…

HIGH 73

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=backup

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00295 Published 2024-07-10 No fix listed CWE-352

TI-2024-26891 CVE-2024-40328 · GHSA-x6fc-g9vq-7q2g

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability…

MEDIUM 61

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/memberOnline_deal.php?mudi=del&dataType=&dataID=6

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00192 Published 2024-07-10 No fix listed CWE-352

TI-2024-26847 CVE-2024-40038 · GHSA-rx4x-qmmx-qc5f

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability…

MEDIUM 57

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userScore_deal.php?mudi=rev

CVSS 3.1MEDIUM 5.3 Local No auth User interaction EPSS 0.00173 Published 2024-07-09 No fix listed CWE-352

TI-2024-26845 CVE-2024-40036 · GHSA-22m8-p76h-g65g

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability…

HIGH 73

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_deal.php?mudi=add&nohrefStr=close

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00601 Published 2024-07-09 No fix listed CWE-79

TI-2024-26844 CVE-2024-40035 · GHSA-p5mm-jh3v-6858

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability…

MEDIUM 60

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userLevel_deal.php?mudi=add.

CVSS 3.1MEDIUM 5.9 Local No auth No interaction EPSS 0.00169 Published 2024-07-09 No fix listed CWE-352

TI-2024-26158 CVE-2024-39023 · GHSA-fx4g-2qhw-fqxx

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability…

HIGH 73

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/info_deal.php?mudi=add&nohrefStr=close

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00296 Published 2024-07-05 No fix listed CWE-352

TI-2024-26157 CVE-2024-39022 · GHSA-78f6-8cx3-2458

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability…

HIGH 73

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/infoSys_deal.php?mudi=deal

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00296 Published 2024-07-05 No fix listed CWE-352

TI-2024-26156 CVE-2024-39021 · GHSA-wf46-934q-8fhp

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…

MEDIUM 58

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsApiData_deal.php?mudi=del

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00185 Published 2024-07-05 No fix listed CWE-352

TI-2024-26155 CVE-2024-39020 · GHSA-h5x8-8jch-fmhv

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability…

MEDIUM 61

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/vpsApiData_deal.php?mudi=rev&nohrefStr=close

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00192 Published 2024-07-05 No fix listed CWE-352

TI-2024-26154 CVE-2024-39019 · GHSA-j927-gxmp-c96j

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability…

MEDIUM 58

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/idcProData_deal.php?mudi=del

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00195 Published 2024-07-05 No fix listed CWE-352

TI-2024-26177 CVE-2024-39119 · GHSA-8v2w-8rwm-w5wr

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via…

MEDIUM 58

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/info_deal.php?mudi=rev&nohrefStr=close.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00199 Published 2024-07-02 No fix listed CWE-352

TI-2024-26195 CVE-2024-39158 · GHSA-48f2-r22m-c3xq

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…

HIGH 73

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/userSys_deal.php?mudi=infoSet.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00296 Published 2024-06-27 No fix listed CWE-352

TI-2024-26194 CVE-2024-39157 · GHSA-65j5-22x9-vjjf

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…

MEDIUM 51

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ipRecord_deal.php?mudi=del&dataType=&dataID=1.

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.00196 Published 2024-06-27 No fix listed CWE-352

TI-2024-26193 CVE-2024-39156 · GHSA-c5vh-fhpc-wg5w

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…

MEDIUM 51

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord_deal.php?mudi=add.

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.00196 Published 2024-06-27 No fix listed CWE-352

TI-2024-26192 CVE-2024-39155 · GHSA-7883-qjph-588g

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…

MEDIUM 63

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ipRecord_deal.php?mudi=add.

CVSS 3.1MEDIUM 6.8 Network Low privileges User interaction EPSS 0.00205 Published 2024-06-27 No fix listed CWE-352

TI-2024-26191 CVE-2024-39154 · GHSA-vwhp-3xvr-4jc2

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…

HIGH 73

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord_deal.php?mudi=del&dataType=word&dataTypeCN.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00296 Published 2024-06-27 No fix listed CWE-352

TI-2024-26190 CVE-2024-39153 · GHSA-x5j4-q642-fm34

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…

MEDIUM 55

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/info_deal.php?mudi=del&dataType=news&dataTypeCN.

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.00222 Published 2024-06-27 No fix listed CWE-352

TI-2024-24365 CVE-2024-36670 · GHSA-f935-6jhc-wv29

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the…

HIGH 73

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/vpsClass_deal.php?mudi=del

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00289 Published 2024-06-05 No fix listed CWE-352

TI-2024-24316 CVE-2024-36550 · GHSA-mq9m-c33f-xf29

idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via…

HIGH 71

idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/vpsCompany_deal.php?mudi=add&nohrefStr=close

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00225 Published 2024-06-04 No fix listed CWE-352

Vulnerabilities

Filters