idccms records

53 published records for vendor idccms.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

53 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2024-40333No exploit	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=del&dataID=2idccms · idccms · CWE-79 Pre-auth XSS CSRF	High8.8	—	0.6%	Jul 10, 2024
35Monitor	CVE-2024-40036No exploit	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_deal.php?mudi=add&nohrefStr=clidccms · idccms · CWE-79 Pre-auth XSS CSRF	High8.8	—	0.6%	Jul 9, 2024
35Monitor	CVE-2024-35108No exploit	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/homePro_deal.php?mudi=del&dataType=&dataidccms · idccms · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	May 14, 2024
35Monitor	CVE-2024-40331No exploit	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/dbBakMySQL_deal.php?mudi=backupidccms · idccms · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	Jul 10, 2024
35Monitor	CVE-2024-35010No exploit	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/banner_deal.php?mudi=del&dataType=&dataTidccms · idccms · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	May 14, 2024
35Monitor	CVE-2024-35009No exploit	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/share_switch.php?mudi=switch&dataType=&fidccms · idccms · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	May 14, 2024
35Monitor	CVE-2024-39023No exploit	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/info_deal.php?mudi=add&nohrefStr=closeidccms · idccms · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	Jul 5, 2024
35Monitor	CVE-2024-39158No exploit	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/userSys_deal.php?mudi=infoSet.idccms · idccms · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	Jun 27, 2024
35Monitor	CVE-2024-39154No exploit	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord_deal.php?mudi=del&dataType=word&idccms · idccms · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	Jun 27, 2024
35Monitor	CVE-2024-36549No exploit	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/vpsCompany_deal.php?mudi=rev&nohrefStr=closeidccms · idccms · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	Jun 4, 2024
35Monitor	CVE-2024-39022No exploit	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/infoSys_deal.php?mudi=dealidccms · idccms · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	Jul 5, 2024
35Monitor	CVE-2024-35559No exploit	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=rev&nohrefStr=cloidccms · idccms · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	May 22, 2024
35Monitor	CVE-2024-35556No exploit	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsSys_deal.php?mudi=infoSet.idccms · idccms · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	May 22, 2024
35Monitor	CVE-2024-40329No exploit	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=backupidccms · idccms · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	Jul 10, 2024
35Monitor	CVE-2024-40334No exploit	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/serverFile_deal.php?mudi=upFileDel&dataIidccms · idccms · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	Jul 10, 2024
35Monitor	CVE-2024-35558No exploit	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=rev&nohrefStr=close.idccms · idccms · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	May 22, 2024
35Monitor	CVE-2024-36670No exploit	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/vpsClass_deal.php?mudi=delidccms · idccms · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	Jun 5, 2024
35Monitor	CVE-2024-35552No exploit	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=del&dataType=logoidccms · idccms · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	May 22, 2024
35Monitor	CVE-2024-36548No exploit	idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/vpsCompany_deal.php?mudi=delidccms · idccms · CWE-352 Pre-auth CSRF	High8.8	—	0.2%	Jun 4, 2024
35Monitor	CVE-2024-36547No exploit	idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/vpsClass_deal.php?mudi=addidccms · idccms · CWE-352 Pre-auth CSRF	High8.8	—	0.2%	Jun 4, 2024
35Monitor	CVE-2024-36550No exploit	idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/vpsCompany_deal.php?mudi=add&nohrefStr=closeidccms · idccms · CWE-352 Pre-auth CSRF	High8.8	—	0.2%	Jun 4, 2024
35Monitor	CVE-2024-40332No exploit	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/moneyRecord_deal.php?mudi=delRecordidccms · idccms · CWE-352 Pre-auth CSRF	High8.8	—	0.2%	Jul 10, 2024
33Monitor	CVE-2024-35553No exploit	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=add&nohrefStr=cloidccms · idccms · CWE-352 Pre-auth CSRF	High8.3	—	0.2%	May 22, 2024
32Monitor	CVE-2024-33830No exploit	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/readDeal.php?mudi=clearWebCache.idccms · idccms · CWE-352 Pre-auth CSRF	High8.1	—	0.3%	May 6, 2024
30Monitor	CVE-2022-27333No exploit	idcCMS v1.10 was discovered to contain an issue which allows attackers to arbitrarily delete the install.lock file, resulting in a reset of idccms · idccms Pre-auth	High7.5	—	0.8%	Mar 21, 2022

CVE-2024-40333
35Monitor
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=del&dataID=2
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- XSS
- CSRF
idccms · idccmsJul 10, 2024
CVE-2024-40036
35Monitor
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_deal.php?mudi=add&nohrefStr=cl
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- XSS
- CSRF
idccms · idccmsJul 9, 2024
CVE-2024-35108
35Monitor
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/homePro_deal.php?mudi=del&dataType=&data
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
idccms · idccmsMay 14, 2024
CVE-2024-40331
35Monitor
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/dbBakMySQL_deal.php?mudi=backup
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
idccms · idccmsJul 10, 2024
CVE-2024-35010
35Monitor
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/banner_deal.php?mudi=del&dataType=&dataT
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
idccms · idccmsMay 14, 2024
CVE-2024-35009
35Monitor
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/share_switch.php?mudi=switch&dataType=&f
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
idccms · idccmsMay 14, 2024
CVE-2024-39023
35Monitor
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/info_deal.php?mudi=add&nohrefStr=close
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
idccms · idccmsJul 5, 2024
CVE-2024-39158
35Monitor
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/userSys_deal.php?mudi=infoSet.
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
idccms · idccmsJun 27, 2024
CVE-2024-39154
35Monitor
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord_deal.php?mudi=del&dataType=word&
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
idccms · idccmsJun 27, 2024
CVE-2024-36549
35Monitor
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/vpsCompany_deal.php?mudi=rev&nohrefStr=close
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
idccms · idccmsJun 4, 2024
CVE-2024-39022
35Monitor
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/infoSys_deal.php?mudi=deal
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
idccms · idccmsJul 5, 2024
CVE-2024-35559
35Monitor
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=rev&nohrefStr=clo
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
idccms · idccmsMay 22, 2024
CVE-2024-35556
35Monitor
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsSys_deal.php?mudi=infoSet.
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
idccms · idccmsMay 22, 2024
CVE-2024-40329
35Monitor
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=backup
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
idccms · idccmsJul 10, 2024
CVE-2024-40334
35Monitor
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/serverFile_deal.php?mudi=upFileDel&dataI
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
idccms · idccmsJul 10, 2024
CVE-2024-35558
35Monitor
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=rev&nohrefStr=close.
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
idccms · idccmsMay 22, 2024
CVE-2024-36670
35Monitor
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/vpsClass_deal.php?mudi=del
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
idccms · idccmsJun 5, 2024
CVE-2024-35552
35Monitor
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=del&dataType=logo
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
idccms · idccmsMay 22, 2024
CVE-2024-36548
35Monitor
idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/vpsCompany_deal.php?mudi=del
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
idccms · idccmsJun 4, 2024
CVE-2024-36547
35Monitor
idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/vpsClass_deal.php?mudi=add
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
idccms · idccmsJun 4, 2024
CVE-2024-36550
35Monitor
idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/vpsCompany_deal.php?mudi=add&nohrefStr=close
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
idccms · idccmsJun 4, 2024
CVE-2024-40332
35Monitor
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/moneyRecord_deal.php?mudi=delRecord
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
idccms · idccmsJul 10, 2024
CVE-2024-35553
33Monitor
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=add&nohrefStr=clo
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- CSRF
idccms · idccmsMay 22, 2024
CVE-2024-33830
32Monitor
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/readDeal.php?mudi=clearWebCache.
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- CSRF
idccms · idccmsMay 6, 2024
CVE-2022-27333
30Monitor
idcCMS v1.10 was discovered to contain an issue which allows attackers to arbitrarily delete the install.lock file, resulting in a reset of
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
idccms · idccmsMar 21, 2022