Approved changes feed: RSS · Atom
cpe:2.3:a:idccms_project:idccms:-:*:*:*:*:*:*:*part: a version: - update: *
| Vendor | Idccms Project (3ad71a88-1224-50ff-9b8c-41d204ce29e4) |
|---|---|
| Product | Idccms (deb0d789-c517-56a8-96bc-e7d1dce6f64c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-4172 |
vulnerable | 2026-06-08 06:50:17.155609 |
idcCMS cross-site request forgery
MEDIUM (4.3)
A vulnerability classified as problematic was found in idcCMS 1.35. Affected by this vulnerability is an unknown functionality of the file /admin/admin_cl.php?mudi=revPwd. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-261991.
Published: 2024-04-25T14:00:04.911Z
Updated: 2024-08-01T20:33:52.872Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-40332 |
vulnerable | 2026-06-08 06:43:52.182341 |
Details available
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/moneyRecord_deal.php?mudi=delRecord
Published: 2024-07-10T00:00:00.000Z
Updated: 2024-08-02T04:33:11.646Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-35561 |
vulnerable | 2026-06-08 06:39:42.120677 |
Details available
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=add&nohrefStr=close.
Published: 2024-05-22T13:38:57.449Z
Updated: 2025-02-13T15:59:00.049Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-35012 |
vulnerable | 2026-06-08 06:37:35.181411 |
Details available
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoType_deal.php?mudi=add&nohrefStr=close.
Published: 2024-05-14T13:58:31.739Z
Updated: 2025-02-13T15:53:52.701Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-35009 |
vulnerable | 2026-06-08 06:37:35.180272 |
Details available
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/share_switch.php?mudi=switch&dataType=&fieldName=state&fieldName2=state&tabName=banner&dataID=6.
Published: 2024-05-14T13:58:28.753Z
Updated: 2025-02-13T15:53:51.059Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33830 |
vulnerable | 2026-06-08 06:37:32.183182 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.