ID
Product
idcCMS
54
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 25Medium 25Low 4
Watch
Add idcCMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-40329 | 8.8 | Jul 10 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=backup Affected: 1.35 |
| CVE-2024-40332 | 8.8 | Jul 10 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/moneyRecord_deal.php?mudi=delRecord Affected: 1.35 |
| CVE-2024-40331 | 8.8 | Jul 10 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/dbBakMySQL_deal.php?mudi=backup Affected: 1.35 |
| CVE-2024-40334 | 8.8 | Jul 10 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/serverFile_deal.php?mudi=upFileDel&dataID=3 Affected: 1.35 |
| CVE-2024-40333 | 8.8 | Jul 10 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=del&dataID=2 Affected: 1.35 |
| CVE-2024-40036 | 8.8 | Jul 9 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_deal.php?mudi=add&nohrefStr=close Affected: 1.35 |
| CVE-2024-39023 | 8.8 | Jul 5 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/info_deal.php?mudi=add&nohrefStr=close Affected: 1.35 |
| CVE-2024-39022 | 8.8 | Jul 5 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/infoSys_deal.php?mudi=deal Affected: 1.35 |
| CVE-2024-39158 | 8.8 | Jun 27 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/userSys_deal.php?mudi=infoSet Affected: 1.35 |
| CVE-2024-39154 | 8.8 | Jun 27 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord_deal.php?mudi=del&dataType=word&dataTypeCN Affected: 1.35 |
| CVE-2024-36670 | 8.8 | Jun 5 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/vpsClass_deal.php?mudi=del Affected: 1.35 |
| CVE-2024-36550 | 8.8 | Jun 4 | idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/vpsCompany_deal.php?mudi=add&nohrefStr=close Affected: 1.35 |
| CVE-2024-36549 | 8.8 | Jun 4 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/vpsCompany_deal.php?mudi=rev&nohrefStr=close Affected: 1.35 |
| CVE-2024-36548 | 8.8 | Jun 4 | idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/vpsCompany_deal.php?mudi=del Affected: 1.35 |
| CVE-2024-36547 | 8.8 | Jun 4 | idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/vpsClass_deal.php?mudi=add Affected: 1.35 |
| CVE-2024-35559 | 8.8 | May 22 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=rev&nohrefStr=close Affected: 1.35 |
| CVE-2024-35558 | 8.8 | May 22 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=rev&nohrefStr=close Affected: 1.35 |
| CVE-2024-35556 | 8.8 | May 22 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsSys_deal.php?mudi=infoSet Affected: 1.35 |
| CVE-2024-35552 | 8.8 | May 22 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=del&dataType=logo&dataTypeCN Affected: 1.35 |
| CVE-2024-35108 | 8.8 | May 15 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/homePro_deal.php?mudi=del&dataType=&dataTypeCN Affected: 1.35 |
| CVE-2024-35010 | 8.8 | May 14 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component… Affected: 1.35 |
| CVE-2024-35009 | 8.8 | May 14 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component… Affected: 1.35 |
| CVE-2024-35553 | 8.3 | May 22 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=add&nohrefStr=close Affected: 1.35 |
| CVE-2024-33830 | 8.1 | May 6 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/readDeal.php?mudi=clearWebCache Affected: 1.35 |
| CVE-2022-27333 | 7.5 | Mar 21 | idcCMS v1.10 was discovered to contain an issue which allows attackers to arbitrarily delete the install.lock file, resulting in a reset of the CMS settings and data Affected: 1.10 |
Showing 25