CVE-2024-4172

A vulnerability classified as problematic was found in idcCMS 1.35. Affected by this vulnerability is an unknown functionality of the file /admin/admin_cl.php?mudi=revPwd. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-261991.

• CWE-352

• https://github.com/bigbigbigbaby/cms2/blob/main/1.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.261991Permissions Required, VDB Entry
• https://vuldb.com/?id.261991Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.322300Third Party Advisory, VDB Entry
• https://github.com/bigbigbigbaby/cms2/blob/main/1.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.261991Permissions Required, VDB Entry
• https://vuldb.com/?id.261991Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.322300Third Party Advisory, VDB Entry

Published

Apr 25, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-41714A vulnerability in the Web Interface component of Mitel MiCo…8.8
• CVE-2024-41715The goTenna Pro ATAK Plugin does not inject extra characters…4.3
• CVE-2024-41716Cleartext storage of sensitive information vulnerability exi…8.1
• CVE-2024-41717Kieback & Peter's DDC4000 series is vulnerable to a path tra…9.8
• CVE-2024-41718Rejected reason: ** REJECT ** DO NOT USE THIS CVE ID. Consul…
• CVE-2024-41719When generating QKView of BIG-IP Next instance from the BIG-…5.5
• CVE-2024-41720Incorrect permission assignment for critical resource issue …8
• CVE-2024-41721An insufficient boundary validation in the USB code could le…8.1
• CVE-2024-41722In the goTenna Pro ATAK Plugin there is a vulnerability that…6.5
• CVE-2024-41723Undisclosed requests to BIG-IP iControl REST can lead to inf…4.3
• CVE-2024-41724Improper Certificate Validation (CWE-295) in the Gallagher C…8.7
• CVE-2024-41725ProGauge MAGLINK LX CONSOLE does not have sufficient filteri…6.1