<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: idccms</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-11587: A vulnerability was found in idcCMS 1.60</title><link>https://patchthecve.com/cve/CVE-2024-11587.html</link><guid>https://patchthecve.com/cve/CVE-2024-11587.html</guid><pubDate>Wed, 17 Jun 2026 06:58:01 +0000</pubDate><description>LOW 3.5: A vulnerability was found in idcCMS 1.60. It has been classified as problematic. This affects the function GetCityOptionJs of the file /inc/classProvCity.php. The manipulation of the argument idName leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been d</description></item><item><title>CVE-2024-40336: idccms v1.35 is vulnerable to Cross Site Scripting (XSS) within the &#x27;Image Advertising Management.&#x27;</title><link>https://patchthecve.com/cve/CVE-2024-40336.html</link><guid>https://patchthecve.com/cve/CVE-2024-40336.html</guid><pubDate>Wed, 17 Jun 2026 07:45:48 +0000</pubDate><description>MEDIUM 6.1: idccms v1.35 is vulnerable to Cross Site Scripting (XSS) within the &#x27;Image Advertising Management.&#x27;</description></item><item><title>CVE-2024-40332: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/moneyRecor</title><link>https://patchthecve.com/cve/CVE-2024-40332.html</link><guid>https://patchthecve.com/cve/CVE-2024-40332.html</guid><pubDate>Wed, 17 Jun 2026 07:45:48 +0000</pubDate><description>HIGH 8.8: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/moneyRecord_deal.php?mudi=delRecord</description></item><item><title>CVE-2024-40331: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/dbBakMySQL</title><link>https://patchthecve.com/cve/CVE-2024-40331.html</link><guid>https://patchthecve.com/cve/CVE-2024-40331.html</guid><pubDate>Wed, 17 Jun 2026 07:45:47 +0000</pubDate><description>HIGH 8.8: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/dbBakMySQL_deal.php?mudi=backup</description></item><item><title>CVE-2024-40334: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/serverFile</title><link>https://patchthecve.com/cve/CVE-2024-40334.html</link><guid>https://patchthecve.com/cve/CVE-2024-40334.html</guid><pubDate>Wed, 17 Jun 2026 07:45:48 +0000</pubDate><description>HIGH 8.8: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/serverFile_deal.php?mudi=upFileDel&amp;dataID=3</description></item><item><title>CVE-2024-40333: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_de</title><link>https://patchthecve.com/cve/CVE-2024-40333.html</link><guid>https://patchthecve.com/cve/CVE-2024-40333.html</guid><pubDate>Wed, 17 Jun 2026 07:45:48 +0000</pubDate><description>HIGH 8.8: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=del&amp;dataID=2</description></item><item><title>CVE-2024-40329: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_de</title><link>https://patchthecve.com/cve/CVE-2024-40329.html</link><guid>https://patchthecve.com/cve/CVE-2024-40329.html</guid><pubDate>Wed, 17 Jun 2026 07:45:47 +0000</pubDate><description>HIGH 8.8: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=backup</description></item><item><title>CVE-2024-40328: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/memberOnli</title><link>https://patchthecve.com/cve/CVE-2024-40328.html</link><guid>https://patchthecve.com/cve/CVE-2024-40328.html</guid><pubDate>Wed, 17 Jun 2026 07:45:47 +0000</pubDate><description>MEDIUM 6.3: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/memberOnline_deal.php?mudi=del&amp;dataType=&amp;dataID=6</description></item><item><title>CVE-2024-40039: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_</title><link>https://patchthecve.com/cve/CVE-2024-40039.html</link><guid>https://patchthecve.com/cve/CVE-2024-40039.html</guid><pubDate>Wed, 17 Jun 2026 07:45:39 +0000</pubDate><description>HIGH 8.8: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_deal.php?mudi=del</description></item><item><title>CVE-2024-40038: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userScore_</title><link>https://patchthecve.com/cve/CVE-2024-40038.html</link><guid>https://patchthecve.com/cve/CVE-2024-40038.html</guid><pubDate>Wed, 17 Jun 2026 07:45:38 +0000</pubDate><description>MEDIUM 5.3: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userScore_deal.php?mudi=rev</description></item><item><title>CVE-2024-40037: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userScore_</title><link>https://patchthecve.com/cve/CVE-2024-40037.html</link><guid>https://patchthecve.com/cve/CVE-2024-40037.html</guid><pubDate>Wed, 17 Jun 2026 07:45:38 +0000</pubDate><description>HIGH 8.8: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userScore_deal.php?mudi=del</description></item><item><title>CVE-2024-40036: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_</title><link>https://patchthecve.com/cve/CVE-2024-40036.html</link><guid>https://patchthecve.com/cve/CVE-2024-40036.html</guid><pubDate>Wed, 17 Jun 2026 07:45:38 +0000</pubDate><description>HIGH 8.8: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userGroup_deal.php?mudi=add&amp;nohrefStr=close</description></item><item><title>CVE-2024-40035: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userLevel_</title><link>https://patchthecve.com/cve/CVE-2024-40035.html</link><guid>https://patchthecve.com/cve/CVE-2024-40035.html</guid><pubDate>Wed, 17 Jun 2026 07:45:38 +0000</pubDate><description>MEDIUM 5.9: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userLevel_deal.php?mudi=add.</description></item><item><title>CVE-2024-40034: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userLevel_</title><link>https://patchthecve.com/cve/CVE-2024-40034.html</link><guid>https://patchthecve.com/cve/CVE-2024-40034.html</guid><pubDate>Wed, 17 Jun 2026 07:45:38 +0000</pubDate><description>HIGH 8.8: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/userLevel_deal.php?mudi=del</description></item><item><title>CVE-2024-39023: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/info_deal.p</title><link>https://patchthecve.com/cve/CVE-2024-39023.html</link><guid>https://patchthecve.com/cve/CVE-2024-39023.html</guid><pubDate>Wed, 17 Jun 2026 07:41:23 +0000</pubDate><description>HIGH 8.8: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/info_deal.php?mudi=add&amp;nohrefStr=close</description></item><item><title>CVE-2024-39022: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/infoSys_de</title><link>https://patchthecve.com/cve/CVE-2024-39022.html</link><guid>https://patchthecve.com/cve/CVE-2024-39022.html</guid><pubDate>Wed, 17 Jun 2026 07:41:23 +0000</pubDate><description>HIGH 8.8: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/infoSys_deal.php?mudi=deal</description></item><item><title>CVE-2024-39021: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsApiData</title><link>https://patchthecve.com/cve/CVE-2024-39021.html</link><guid>https://patchthecve.com/cve/CVE-2024-39021.html</guid><pubDate>Wed, 17 Jun 2026 07:41:23 +0000</pubDate><description>MEDIUM 5.4: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsApiData_deal.php?mudi=del</description></item><item><title>CVE-2024-39020: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/vpsApiData</title><link>https://patchthecve.com/cve/CVE-2024-39020.html</link><guid>https://patchthecve.com/cve/CVE-2024-39020.html</guid><pubDate>Wed, 17 Jun 2026 07:41:23 +0000</pubDate><description>MEDIUM 6.3: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/vpsApiData_deal.php?mudi=rev&amp;nohrefStr=close</description></item><item><title>CVE-2024-39019: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/idcProData</title><link>https://patchthecve.com/cve/CVE-2024-39019.html</link><guid>https://patchthecve.com/cve/CVE-2024-39019.html</guid><pubDate>Wed, 17 Jun 2026 07:41:22 +0000</pubDate><description>MEDIUM 5.4: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/idcProData_deal.php?mudi=del</description></item><item><title>CVE-2024-39119: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/info_deal.php?mudi=rev&amp;no</title><link>https://patchthecve.com/cve/CVE-2024-39119.html</link><guid>https://patchthecve.com/cve/CVE-2024-39119.html</guid><pubDate>Wed, 17 Jun 2026 07:41:26 +0000</pubDate><description>MEDIUM 5.4: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/info_deal.php?mudi=rev&amp;nohrefStr=close.</description></item><item><title>CVE-2024-39158: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/userSys_de</title><link>https://patchthecve.com/cve/CVE-2024-39158.html</link><guid>https://patchthecve.com/cve/CVE-2024-39158.html</guid><pubDate>Wed, 17 Jun 2026 07:41:29 +0000</pubDate><description>HIGH 8.8: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/userSys_deal.php?mudi=infoSet.</description></item><item><title>CVE-2024-39157: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ipRecord_d</title><link>https://patchthecve.com/cve/CVE-2024-39157.html</link><guid>https://patchthecve.com/cve/CVE-2024-39157.html</guid><pubDate>Wed, 17 Jun 2026 07:41:29 +0000</pubDate><description>LOW 3.8: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ipRecord_deal.php?mudi=del&amp;dataType=&amp;dataID=1.</description></item><item><title>CVE-2024-39156: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord_de</title><link>https://patchthecve.com/cve/CVE-2024-39156.html</link><guid>https://patchthecve.com/cve/CVE-2024-39156.html</guid><pubDate>Wed, 17 Jun 2026 07:41:29 +0000</pubDate><description>LOW 3.8: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord_deal.php?mudi=add.</description></item><item><title>CVE-2024-39155: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ipRecord_d</title><link>https://patchthecve.com/cve/CVE-2024-39155.html</link><guid>https://patchthecve.com/cve/CVE-2024-39155.html</guid><pubDate>Wed, 17 Jun 2026 07:41:28 +0000</pubDate><description>MEDIUM 6.8: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ipRecord_deal.php?mudi=add.</description></item><item><title>CVE-2024-39154: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord_de</title><link>https://patchthecve.com/cve/CVE-2024-39154.html</link><guid>https://patchthecve.com/cve/CVE-2024-39154.html</guid><pubDate>Wed, 17 Jun 2026 07:41:28 +0000</pubDate><description>HIGH 8.8: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord_deal.php?mudi=del&amp;dataType=word&amp;dataTypeCN.</description></item><item><title>CVE-2024-39153: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/info_deal.</title><link>https://patchthecve.com/cve/CVE-2024-39153.html</link><guid>https://patchthecve.com/cve/CVE-2024-39153.html</guid><pubDate>Wed, 17 Jun 2026 07:41:28 +0000</pubDate><description>MEDIUM 4.7: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/info_deal.php?mudi=del&amp;dataType=news&amp;dataTypeCN.</description></item><item><title>CVE-2024-36670: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/vpsClass_de</title><link>https://patchthecve.com/cve/CVE-2024-36670.html</link><guid>https://patchthecve.com/cve/CVE-2024-36670.html</guid><pubDate>Wed, 17 Jun 2026 07:37:04 +0000</pubDate><description>HIGH 8.8: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/vpsClass_deal.php?mudi=del</description></item><item><title>CVE-2024-36669: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/type_deal.p</title><link>https://patchthecve.com/cve/CVE-2024-36669.html</link><guid>https://patchthecve.com/cve/CVE-2024-36669.html</guid><pubDate>Wed, 17 Jun 2026 07:37:04 +0000</pubDate><description>HIGH 8.8: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/type_deal.php?mudi=add.</description></item><item><title>CVE-2024-36668: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/type_deal.p</title><link>https://patchthecve.com/cve/CVE-2024-36668.html</link><guid>https://patchthecve.com/cve/CVE-2024-36668.html</guid><pubDate>Wed, 17 Jun 2026 07:37:04 +0000</pubDate><description>HIGH 8.8: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/type_deal.php?mudi=del</description></item><item><title>CVE-2024-36667: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/idcProType</title><link>https://patchthecve.com/cve/CVE-2024-36667.html</link><guid>https://patchthecve.com/cve/CVE-2024-36667.html</guid><pubDate>Wed, 17 Jun 2026 07:37:04 +0000</pubDate><description>HIGH 8.8: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/idcProType_deal.php?mudi=add&amp;nohrefStr=close</description></item><item><title>CVE-2024-35561: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.ph</title><link>https://patchthecve.com/cve/CVE-2024-35561.html</link><guid>https://patchthecve.com/cve/CVE-2024-35561.html</guid><pubDate>Wed, 17 Jun 2026 07:35:02 +0000</pubDate><description>MEDIUM 5.4: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=add&amp;nohrefStr=close.</description></item><item><title>CVE-2024-35560: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.ph</title><link>https://patchthecve.com/cve/CVE-2024-35560.html</link><guid>https://patchthecve.com/cve/CVE-2024-35560.html</guid><pubDate>Wed, 17 Jun 2026 07:35:01 +0000</pubDate><description>MEDIUM 4.3: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=del&amp;dataType=&amp;dataTypeCN.</description></item><item><title>CVE-2024-35559: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_d</title><link>https://patchthecve.com/cve/CVE-2024-35559.html</link><guid>https://patchthecve.com/cve/CVE-2024-35559.html</guid><pubDate>Wed, 17 Jun 2026 07:35:01 +0000</pubDate><description>HIGH 8.8: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=rev&amp;nohrefStr=close.</description></item><item><title>CVE-2024-35558: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.ph</title><link>https://patchthecve.com/cve/CVE-2024-35558.html</link><guid>https://patchthecve.com/cve/CVE-2024-35558.html</guid><pubDate>Wed, 17 Jun 2026 07:35:01 +0000</pubDate><description>HIGH 8.8: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=rev&amp;nohrefStr=close.</description></item><item><title>CVE-2024-35557: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsApi_dea</title><link>https://patchthecve.com/cve/CVE-2024-35557.html</link><guid>https://patchthecve.com/cve/CVE-2024-35557.html</guid><pubDate>Wed, 17 Jun 2026 07:35:01 +0000</pubDate><description>MEDIUM 5.5: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsApi_deal.php?mudi=rev&amp;nohrefStr=close.</description></item><item><title>CVE-2024-35556: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsSys_dea</title><link>https://patchthecve.com/cve/CVE-2024-35556.html</link><guid>https://patchthecve.com/cve/CVE-2024-35556.html</guid><pubDate>Wed, 17 Jun 2026 07:35:01 +0000</pubDate><description>HIGH 8.8: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsSys_deal.php?mudi=infoSet.</description></item><item><title>CVE-2024-35555: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/share_swit</title><link>https://patchthecve.com/cve/CVE-2024-35555.html</link><guid>https://patchthecve.com/cve/CVE-2024-35555.html</guid><pubDate>Wed, 17 Jun 2026 07:35:01 +0000</pubDate><description>MEDIUM 6.3: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/share_switch.php?mudi=switch&amp;dataType=newsWeb&amp;fieldName=state&amp;fieldName2=state&amp;tabName=infoWeb&amp;dataID=40.</description></item><item><title>CVE-2024-35554: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoWeb_de</title><link>https://patchthecve.com/cve/CVE-2024-35554.html</link><guid>https://patchthecve.com/cve/CVE-2024-35554.html</guid><pubDate>Wed, 17 Jun 2026 07:35:00 +0000</pubDate><description>MEDIUM 5.4: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoWeb_deal.php?mudi=del&amp;dataType=newsWeb&amp;dataTypeCN.</description></item><item><title>CVE-2024-35553: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_d</title><link>https://patchthecve.com/cve/CVE-2024-35553.html</link><guid>https://patchthecve.com/cve/CVE-2024-35553.html</guid><pubDate>Wed, 17 Jun 2026 07:35:00 +0000</pubDate><description>HIGH 8.3: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=add&amp;nohrefStr=close.</description></item><item><title>CVE-2024-35552: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_d</title><link>https://patchthecve.com/cve/CVE-2024-35552.html</link><guid>https://patchthecve.com/cve/CVE-2024-35552.html</guid><pubDate>Wed, 17 Jun 2026 07:35:00 +0000</pubDate><description>HIGH 8.8: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mudi=del&amp;dataType=logo&amp;dataTypeCN.</description></item><item><title>CVE-2024-35551: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoWeb_de</title><link>https://patchthecve.com/cve/CVE-2024-35551.html</link><guid>https://patchthecve.com/cve/CVE-2024-35551.html</guid><pubDate>Wed, 17 Jun 2026 07:35:00 +0000</pubDate><description>MEDIUM 4.3: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoWeb_deal.php?mudi=add.</description></item><item><title>CVE-2024-35550: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoWeb_de</title><link>https://patchthecve.com/cve/CVE-2024-35550.html</link><guid>https://patchthecve.com/cve/CVE-2024-35550.html</guid><pubDate>Wed, 17 Jun 2026 07:35:00 +0000</pubDate><description>MEDIUM 6.3: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoWeb_deal.php?mudi=rev.</description></item><item><title>CVE-2024-35039: idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/tplSys_deal.php?mudi=area</title><link>https://patchthecve.com/cve/CVE-2024-35039.html</link><guid>https://patchthecve.com/cve/CVE-2024-35039.html</guid><pubDate>Wed, 17 Jun 2026 07:34:18 +0000</pubDate><description>LOW 3.8: idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/tplSys_deal.php?mudi=area.</description></item><item><title>CVE-2024-34958: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/banner_deal</title><link>https://patchthecve.com/cve/CVE-2024-34958.html</link><guid>https://patchthecve.com/cve/CVE-2024-34958.html</guid><pubDate>Wed, 17 Jun 2026 07:34:15 +0000</pubDate><description>MEDIUM 6.5: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/banner_deal.php?mudi=add</description></item><item><title>CVE-2024-34957: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/sysImages_d</title><link>https://patchthecve.com/cve/CVE-2024-34957.html</link><guid>https://patchthecve.com/cve/CVE-2024-34957.html</guid><pubDate>Wed, 17 Jun 2026 07:34:15 +0000</pubDate><description>MEDIUM 5.4: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/sysImages_deal.php?mudi=infoSet.</description></item><item><title>CVE-2024-35012: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoType_d</title><link>https://patchthecve.com/cve/CVE-2024-35012.html</link><guid>https://patchthecve.com/cve/CVE-2024-35012.html</guid><pubDate>Wed, 17 Jun 2026 07:34:18 +0000</pubDate><description>MEDIUM 6.3: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoType_deal.php?mudi=add&amp;nohrefStr=close.</description></item><item><title>CVE-2024-35011: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoType_d</title><link>https://patchthecve.com/cve/CVE-2024-35011.html</link><guid>https://patchthecve.com/cve/CVE-2024-35011.html</guid><pubDate>Wed, 17 Jun 2026 07:34:18 +0000</pubDate><description>MEDIUM 5.4: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoType_deal.php?mudi=rev&amp;nohrefStr=close.</description></item><item><title>CVE-2024-35010: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/banner_dea</title><link>https://patchthecve.com/cve/CVE-2024-35010.html</link><guid>https://patchthecve.com/cve/CVE-2024-35010.html</guid><pubDate>Wed, 17 Jun 2026 07:34:18 +0000</pubDate><description>HIGH 8.8: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/banner_deal.php?mudi=del&amp;dataType=&amp;dataTypeCN=%E5%9B%BE%E7%89%87%E5%B9%BF%E5%91%8A&amp;theme=cs&amp;dataID=6.</description></item><item><title>CVE-2024-35009: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/share_swit</title><link>https://patchthecve.com/cve/CVE-2024-35009.html</link><guid>https://patchthecve.com/cve/CVE-2024-35009.html</guid><pubDate>Wed, 17 Jun 2026 07:34:18 +0000</pubDate><description>HIGH 8.8: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/share_switch.php?mudi=switch&amp;dataType=&amp;fieldName=state&amp;fieldName2=state&amp;tabName=banner&amp;dataID=6.</description></item><item><title>CVE-2024-33830: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/readDeal.p</title><link>https://patchthecve.com/cve/CVE-2024-33830.html</link><guid>https://patchthecve.com/cve/CVE-2024-33830.html</guid><pubDate>Wed, 17 Jun 2026 07:32:24 +0000</pubDate><description>HIGH 8.1: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/readDeal.php?mudi=clearWebCache.</description></item></channel></rss>