CVE-2024-40331 idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/dbBakMySQL_deal.php?mudi=backup

HighCVSS 8.8 EPSS 0.30%

Published: 2024-07-10 02:58 (approximate time: when CVE Radar first recorded it)
Updated: 2026-06-17 10:45
Exploit status: No public exploit known

Description

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/dbBakMySQL_deal.php?mudi=backup

Product	Affected versions	Fixed in
idccms project idccms	= v1.35	No fix listed
idccms	= 1.35	No fix listed

8.8 High

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.