Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Idccms

First CVE: Mar 21, 2022Active for: 4 yearsTotal CVEs: 59
35.2
VTI Score
Medium

Idccms is a content management system with a moderate vulnerability footprint concentrated in a single, narrowly scoped product. The recurring weakness classes—cross-site request forgery, cross-site scripting, code injection, and input-validation gaps—are characteristic of web application architectures where user-controlled data flows into rendering, execution, or state-modification contexts without sufficient sanitization or isolation. Defenders should prioritize input-handling and output-encoding review when assessing this vendor's updates, particularly in contexts where the CMS is internet-facing or processes untrusted content. Current exploitation activity, severity breakdowns, and detailed exposure metrics are shown alongside this summary.

FAUCET AI Generated
59
Total CVEs
More Total CVEs than 99% of tracked vendors
29.5
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 100% of tracked vendors
7.2
Avg CVSS Score
Higher Avg CVSS Score than 49% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Idccms over time

Volume of CVEsAvg CVSS Base Score
First CVE
Mar 21, 2022
4 years ago
Most Recent CVE
Nov 21, 2024
611 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (59 CVEs).

59 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2024-11587MEDIUM
A vulnerability was found in idcCMS 1.60. It has been classified as problematic. This affects the function GetCityOptionJs of the file /inc/classProvCity.php. The manipulation of t
Nov 21, 20246.128NOYES
CVE-2024-40331HIGH
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/dbBakMySQL_deal.php?mudi=backup
Jul 10, 20248.825NONO
CVE-2024-40332HIGH
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/moneyRecord_deal.php?mudi=delRecord
Jul 10, 20248.824NONO
CVE-2024-40334HIGH
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/serverFile_deal.php?mudi=upFileDel&dataID=3
Jul 10, 20248.824NONO
CVE-2024-40333HIGH
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=del&dataID=2
Jul 10, 20248.824NONO
CVE-2024-40329HIGH
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/softBak_deal.php?mudi=backup
Jul 10, 20248.824NONO
CVE-2024-39023HIGH
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/info_deal.php?mudi=add&nohrefStr=close
Jul 5, 20248.824NONO
CVE-2024-39022HIGH
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/infoSys_deal.php?mudi=deal
Jul 5, 20248.824NONO
CVE-2024-39158HIGH
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/userSys_deal.php?mudi=infoSet.
Jun 27, 20248.824NONO
CVE-2024-39154HIGH
idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord_deal.php?mudi=del&dataType=word&dataTypeCN.
Jun 27, 20248.824NONO
View all 59 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products59 CVEs
42%
53%
Severity distribution among all CVEs352,294 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local2 (3.4%)
Network57 (96.6%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low59 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None10 (16.9%)
Unknown0 (0.0%)
Required49 (83.1%)
Privileges Required
Low11 (18.6%)
High4 (6.8%)
None44 (74.6%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (59 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
1.7% of CVEs· 95th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Idccms.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Idccms — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Idccms's Products

View all 2 CNAs →

Top CWEs