Login Request a demo
ID
Product
idcCMS
by Idccms · last CVE Oct 12, 2026
54
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Vulnerabilities54In the news0Timeline
Severity mix
Critical 0High 25Medium 25Low 4
Severity
All severities54Critical0High25Medium25Low4
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add idcCMS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-40329
8.8
0%
Jul 10
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=backup
Affected: 1.35
CVE-2024-40332
8.8
0%
Jul 10
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/moneyRecord_deal.php?mudi=delRecord
Affected: 1.35
CVE-2024-40331
8.8
0%
Jul 10
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/dbBakMySQL_deal.php?mudi=backup
Affected: 1.35
CVE-2024-40334
8.8
0%
Jul 10
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/serverFile_deal.php?mudi=upFileDel&dataID=3
Affected: 1.35
CVE-2024-40333
8.8
1%
Jul 10
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=del&dataID=2
Affected: 1.35
CVE-2024-40036
8.8
1%
Jul 9
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_deal.php?mudi=add&nohrefStr=close
Affected: 1.35
CVE-2024-39023
8.8
0%
Jul 5
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/info_deal.php?mudi=add&nohrefStr=close
Affected: 1.35
CVE-2024-39022
8.8
0%
Jul 5
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/infoSys_deal.php?mudi=deal
Affected: 1.35
CVE-2024-39158
8.8
0%
Jun 27
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/userSys_deal.php?mudi=infoSet
Affected: 1.35
CVE-2024-39154
8.8
0%
Jun 27
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord_deal.php?mudi=del&dataType=word&dataTypeCN
Affected: 1.35
CVE-2024-36670
8.8
0%
Jun 5
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/vpsClass_deal.php?mudi=del
Affected: 1.35
CVE-2024-36550
8.8
0%
Jun 4
idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/vpsCompany_deal.php?mudi=add&nohrefStr=close
Affected: 1.35
CVE-2024-36549
8.8
0%
Jun 4
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/vpsCompany_deal.php?mudi=rev&nohrefStr=close
Affected: 1.35
CVE-2024-36548
8.8
0%
Jun 4
idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/vpsCompany_deal.php?mudi=del
Affected: 1.35
CVE-2024-36547
8.8
0%
Jun 4
idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/vpsClass_deal.php?mudi=add
Affected: 1.35
CVE-2024-35559
8.8
0%
May 22
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=rev&nohrefStr=close
Affected: 1.35
CVE-2024-35558
8.8
0%
May 22
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=rev&nohrefStr=close
Affected: 1.35
CVE-2024-35556
8.8
0%
May 22
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsSys_deal.php?mudi=infoSet
Affected: 1.35
CVE-2024-35552
8.8
0%
May 22
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=del&dataType=logo&dataTypeCN
Affected: 1.35
CVE-2024-35108
8.8
0%
May 15
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/homePro_deal.php?mudi=del&dataType=&dataTypeCN
Affected: 1.35
CVE-2024-35010
8.8
0%
May 14
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component…
Affected: 1.35
CVE-2024-35009
8.8
0%
May 14
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component…
Affected: 1.35
CVE-2024-35553
8.3
0%
May 22
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=add&nohrefStr=close
Affected: 1.35
CVE-2024-33830
8.1
0%
May 6
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/readDeal.php?mudi=clearWebCache
Affected: 1.35
CVE-2022-27333
7.5
1%
Mar 21
idcCMS v1.10 was discovered to contain an issue which allows attackers to arbitrarily delete the install.lock file, resulting in a reset of the CMS settings and data
Affected: 1.10
CVE-2024-39155
6.8
0%
Jun 27
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ipRecord_deal.php?mudi=add
Affected: 1.35
CVE-2024-34958
6.5
0%
May 16
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/banner_deal.php?mudi=add
Affected: 1.35
CVE-2024-35109
6.5
0%
May 15
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /homePro_deal.php?mudi=add&nohrefStr=close
Affected: 1.35
CVE-2024-40328
6.3
0%
Jul 10
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/memberOnline_deal.php?mudi=del&dataType=&dataID=6
Affected: 1.35
CVE-2024-39020
6.3
0%
Jul 5
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/vpsApiData_deal.php?mudi=rev&nohrefStr=close
Affected: 1.35
CVE-2024-35555
6.3
0%
May 22
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component…
Affected: 1.35
CVE-2024-35550
6.3
0%
May 22
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoWeb_deal.php?mudi=rev
Affected: 1.35
CVE-2024-35012
6.3
0%
May 14
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoType_deal.php?mudi=add&nohrefStr=close
Affected: 1.35
CVE-2024-11587
6.1
1%
Nov 21
idcCMS classProvCity.php GetCityOptionJs cross site scripting
Affected: 1.60
CVE-2024-40336
6.1
0%
Jul 10
idccms v1.35 is vulnerable to Cross Site Scripting (XSS) within the 'Image Advertising Management.'
Affected: 1.35
CVE-2024-40035
5.9
0%
Jul 9
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userLevel_deal.php?mudi=add
Affected: 1.35
CVE-2024-35557
5.5
0%
May 22
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsApi_deal.php?mudi=rev&nohrefStr=close
Affected: 1.35
CVE-2024-39021
5.4
0%
Jul 5
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsApiData_deal.php?mudi=del
Affected: 1.35
CVE-2024-39019
5.4
0%
Jul 5
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/idcProData_deal.php?mudi=del
Affected: 1.35
CVE-2024-39119
5.4
0%
Jul 2
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/info_deal.php?mudi=rev&nohrefStr=close
Affected: 1.35
CVE-2024-35561
5.4
0%
May 22
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=add&nohrefStr=close
Affected: 1.35
CVE-2024-35554
5.4
0%
May 22
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoWeb_deal.php?mudi=del&dataType=newsWeb&dataTypeCN
Affected: 1.35
CVE-2024-34957
5.4
0%
May 16
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/sysImages_deal.php?mudi=infoSet
Affected: 1.35
CVE-2024-35011
5.4
0%
May 14
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoType_deal.php?mudi=rev&nohrefStr=close
Affected: 1.35
CVE-2024-33829
5.4
0%
May 6
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/readDeal.php?mudi=updateWebCache
Affected: 1.35
CVE-2024-40038
5.3
0%
Jul 9
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userScore_deal.php?mudi=rev
Affected: 1.35
CVE-2024-39153
4.7
0%
Jun 27
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/info_deal.php?mudi=del&dataType=news&dataTypeCN
Affected: 1.35
CVE-2024-35560
4.3
0%
May 22
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=del&dataType=&dataTypeCN
Affected: 1.35
CVE-2024-35551
4.3
0%
May 22
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoWeb_deal.php?mudi=add
Affected: 1.35
CVE-2024-4172
4.3
0%
Apr 25
idcCMS cross-site request forgery
Affected: 1.35
Page 1 of 2 · 54 total
12