Login Request a demo
ID
Product
idcCMS
by Idccms · last CVE Oct 12, 2026
54
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Vulnerabilities54In the news0Timeline
Severity mix
Critical 0High 25Medium 25Low 4
Severity
All severities54Critical0High25Medium25Low4
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add idcCMS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-39155
6.8
0%
Jun 27
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ipRecord_deal.php?mudi=add
Affected: 1.35
CVE-2024-34958
6.5
0%
May 16
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/banner_deal.php?mudi=add
Affected: 1.35
CVE-2024-35109
6.5
0%
May 15
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /homePro_deal.php?mudi=add&nohrefStr=close
Affected: 1.35
CVE-2024-40328
6.3
0%
Jul 10
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/memberOnline_deal.php?mudi=del&dataType=&dataID=6
Affected: 1.35
CVE-2024-39020
6.3
0%
Jul 5
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/vpsApiData_deal.php?mudi=rev&nohrefStr=close
Affected: 1.35
CVE-2024-35555
6.3
0%
May 22
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component…
Affected: 1.35
CVE-2024-35550
6.3
0%
May 22
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoWeb_deal.php?mudi=rev
Affected: 1.35
CVE-2024-35012
6.3
0%
May 14
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoType_deal.php?mudi=add&nohrefStr=close
Affected: 1.35
CVE-2024-11587
6.1
1%
Nov 21
idcCMS classProvCity.php GetCityOptionJs cross site scripting
Affected: 1.60
CVE-2024-40336
6.1
0%
Jul 10
idccms v1.35 is vulnerable to Cross Site Scripting (XSS) within the 'Image Advertising Management.'
Affected: 1.35
CVE-2024-40035
5.9
0%
Jul 9
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userLevel_deal.php?mudi=add
Affected: 1.35
CVE-2024-35557
5.5
0%
May 22
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsApi_deal.php?mudi=rev&nohrefStr=close
Affected: 1.35
CVE-2024-39021
5.4
0%
Jul 5
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsApiData_deal.php?mudi=del
Affected: 1.35
CVE-2024-39019
5.4
0%
Jul 5
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/idcProData_deal.php?mudi=del
Affected: 1.35
CVE-2024-39119
5.4
0%
Jul 2
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/info_deal.php?mudi=rev&nohrefStr=close
Affected: 1.35
CVE-2024-35561
5.4
0%
May 22
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=add&nohrefStr=close
Affected: 1.35
CVE-2024-35554
5.4
0%
May 22
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoWeb_deal.php?mudi=del&dataType=newsWeb&dataTypeCN
Affected: 1.35
CVE-2024-34957
5.4
0%
May 16
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/sysImages_deal.php?mudi=infoSet
Affected: 1.35
CVE-2024-35011
5.4
0%
May 14
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoType_deal.php?mudi=rev&nohrefStr=close
Affected: 1.35
CVE-2024-33829
5.4
0%
May 6
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/readDeal.php?mudi=updateWebCache
Affected: 1.35
CVE-2024-40038
5.3
0%
Jul 9
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userScore_deal.php?mudi=rev
Affected: 1.35
CVE-2024-39153
4.7
0%
Jun 27
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/info_deal.php?mudi=del&dataType=news&dataTypeCN
Affected: 1.35
CVE-2024-35560
4.3
0%
May 22
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=del&dataType=&dataTypeCN
Affected: 1.35
CVE-2024-35551
4.3
0%
May 22
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoWeb_deal.php?mudi=add
Affected: 1.35
CVE-2024-4172
4.3
0%
Apr 25
idcCMS cross-site request forgery
Affected: 1.35
Showing 25