VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

401,051 vulnerabilities · 1,766 actively exploited (CISA KEV)

idccms ✕Clear filters

53 results

ID	Severity	Summary	Published
CVE-2024-11587	MEDIUM6.1	A vulnerability was found in idcCMS 1.60. It has been classified as problematic. This affects the function GetCityOptionJs of the file /inc/classProvCity.php. The manipulation of the argument idName leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the publ	21/11/2024
CVE-2024-40336	MEDIUM6.1	idccms v1.35 is vulnerable to Cross Site Scripting (XSS) within the 'Image Advertising Management.'	10/07/2024
CVE-2024-40332	HIGH8.8	idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/moneyRecord_deal.php?mudi=delRecord	10/07/2024
CVE-2024-40331