CVE-2024-35554

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoWeb_deal.php?mudi=del&dataType=newsWeb&dataTypeCN.

Score

CVSS 3.1 5.4 Medium

Status

Analyzed - cve@mitre.org

Published

2024-05-22

Last modified

2025-03-26

Weaknesses

CWE-352

Affected products

• Idccms (Idccms)
• Idccms (Idccms Project)

References

• https://github.com/bearman113/1.md/blob/main/19/csrf.md