Vulnerabilities

59 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

ShowKEV only Public PoC CVSS ≥ 9 CVSS ≥ 7 EPSS ≥ 10%EPSS ≥ 50%Window24h 7d 30d 90d All

StackAll WordPress E-commerce Drupal Joomla npm pip Maven Go Packagist RubyGems NuGet

Sortpublished epss cvss KEV date updated vendor: idccms ✕

CVE	Vulnerability	CVSS	EPSS	Flags	Affected	Exposure	Published
CVE-2024-11587	A vulnerability was found in idcCMS 1.60. A vulnerability was found in idcCMS 1.60. It has been classified as problematic. This affects the function GetCityOptionJs of the file /inc/classProvCity.php. The manipulation of the argument idName leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. NVD description · AI analysis pending	5.3	<1%	PoC ×2	idccms idccms	—	Nov 21, 2024
CVE-2024-40333 +6 in the same advisory: …40331 …40334 …40329 …40332 …40328 …40336	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=del&dataID=2 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=del&dataID=2 NVD description · AI analysis pending	8.8 group max	<1%	PoC	idccms idccms	—	Jul 10, 2024
CVE-2024-40039 +2 in the same advisory: …40037 …40034	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_deal.php?mudi=del idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_deal.php?mudi=del NVD description · AI analysis pending	8.8	<1%	PoC	idccms project idccms	—	Jul 9, 2024
CVE-2024-40036 +2 in the same advisory: …40035 …40038	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_deal.php?mudi=add&nohrefStr=close idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_deal.php?mudi=add&nohrefStr=close NVD description · AI analysis pending	8.8 group max	<1%	PoC	idccms idccms	—	Jul 9, 2024
CVE-2024-39023 +4 in the same advisory: …39022 …39020 …39019 …39021	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/info_deal.php?mudi=add&nohrefStr=close idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/info_deal.php?mudi=add&nohrefStr=close NVD description · AI analysis pending	8.8 group max	<1%	PoC	idccms idccms	—	Jul 5, 2024
CVE-2024-39119	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/info_deal.php?mudi=rev&nohrefStr=close. idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/info_deal.php?mudi=rev&nohrefStr=close. NVD description · AI analysis pending	5.4	<1%	PoC	idccms idccms	—	Jul 2, 2024
CVE-2024-39158 +5 in the same advisory: …39154 …39155 …39153 …39157 …39156	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/userSys_deal.php?mudi=infoSet. idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/userSys_deal.php?mudi=infoSet. NVD description · AI analysis pending	8.8 group max	<1%	PoC	idccms idccms	—	Jun 27, 2024
CVE-2024-36670	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/vpsClass_deal.php?mudi=del idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/vpsClass_deal.php?mudi=del NVD description · AI analysis pending	8.8	<1%	PoC	idccms idccms	—	Jun 5, 2024
CVE-2024-36667 +2 in the same advisory: …36669 …36668	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/idcProType_deal.php?mudi=add&nohrefStr=close idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/idcProType_deal.php?mudi=add&nohrefStr=close NVD description · AI analysis pending	8.8	<1%	PoC	idccms project idccms	—	Jun 5, 2024
CVE-2024-36549 +3 in the same advisory: …36548 …36550 …36547	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/vpsCompany_deal.php?mudi=rev&nohrefStr=close idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/vpsCompany_deal.php?mudi=rev&nohrefStr=close NVD description · AI analysis pending	8.8	<1%	PoC	idccms idccms	—	Jun 4, 2024
CVE-2024-35559 +11 in the same advisory: …35556 …35558 …35552 …35553 …35555 …35550 +5	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=rev&nohrefStr=close. idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=rev&nohrefStr=close. NVD description · AI analysis pending	8.8 group max	<1%	PoC	idccms idccms	—	May 22, 2024
CVE-2024-34958 +2 in the same advisory: …34957 …35039	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/banner_deal.php?mudi=add idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/banner_deal.php?mudi=add NVD description · AI analysis pending	6.5 group max	<1%	PoC	idccms idccms	—	May 16, 2024
CVE-2024-35109	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /homePro_deal.php?mudi=add&nohrefStr=close. idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /homePro_deal.php?mudi=add&nohrefStr=close. NVD description · AI analysis pending	6.5	<1%	PoC	idccms idccms	—	May 15, 2024