idccms vulnerabilities and fixes

Recent CVEs affecting idccms, with upgrade or downgrade steps. 26 tracked.

idccms has 26 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-11-21. Highest priority: CVE-2024-40333 (score 48/100).

• CVE-2024-40336 MEDIUM 6.1 DOWNGRADE idccms v1.35 is vulnerable to Cross Site Scripting (XSS) within the 'Image Advertising Management.'
• CVE-2024-40334 HIGH 8.8 DOWNGRADE idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/serverFile
• CVE-2024-40333 HIGH 8.8 DOWNGRADE idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_de
• CVE-2024-40332 HIGH 8.8 DOWNGRADE idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/moneyRecor
• CVE-2024-40331 HIGH 8.8 DOWNGRADE idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/dbBakMySQL
• CVE-2024-40329 HIGH 8.8 DOWNGRADE idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_de
• CVE-2024-40328 MEDIUM 6.3 DOWNGRADE idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/memberOnli
• CVE-2024-40039 HIGH 8.8 DOWNGRADE idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_
• CVE-2024-40038 MEDIUM 5.3 DOWNGRADE idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userScore_
• CVE-2024-40037 HIGH 8.8 DOWNGRADE idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userScore_
• CVE-2024-40036 HIGH 8.8 DOWNGRADE idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_
• CVE-2024-40035 MEDIUM 5.9 DOWNGRADE idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userLevel_
• CVE-2024-40034 HIGH 8.8 DOWNGRADE idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userLevel_
• CVE-2024-39158 HIGH 8.8 DOWNGRADE idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/userSys_de
• CVE-2024-39157 LOW 3.8 DOWNGRADE idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ipRecord_d
• CVE-2024-39156 LOW 3.8 DOWNGRADE idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord_de
• CVE-2024-39155 MEDIUM 6.8 DOWNGRADE idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ipRecord_d
• CVE-2024-39154 HIGH 8.8 DOWNGRADE idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord_de
• CVE-2024-39153 MEDIUM 4.7 DOWNGRADE idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/info_deal.
• CVE-2024-39119 MEDIUM 5.4 DOWNGRADE idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/info_deal.php?mudi=rev&no
• CVE-2024-39023 HIGH 8.8 DOWNGRADE idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/info_deal.p
• CVE-2024-39022 HIGH 8.8 DOWNGRADE idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/infoSys_de
• CVE-2024-39021 MEDIUM 5.4 DOWNGRADE idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsApiData
• CVE-2024-39020 MEDIUM 6.3 DOWNGRADE idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/vpsApiData
• CVE-2024-39019 MEDIUM 5.4 DOWNGRADE idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/idcProData
• CVE-2024-11587 LOW 3.5 DOWNGRADE A vulnerability was found in idcCMS 1.60

FAQ

How do I fix idccms vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is idccms being exploited right now?

None of the tracked idccms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which idccms CVE should I patch first?

CVE-2024-40333 currently ranks highest (48/100): idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_de.

RSS feed for idccms · ← Back to latest CVEs