CVE-2023-45503

Dettagli della vulnerabilità CVE-2023-45503 Panoramica In Macrob7 Macs Framework Content Management System CMS versioni 1.1.4f e precedenti, la gestione non sicura dell'input utente porta a 16 vulnerabilità di SQL injection. La capacità di eseguire query SQL arbitrarie può portare alla divulgazio...

CVE-2023-45503

SQL Injection vulnerability in Macrob7 Macs CMS 1.1.4f, allows remote attackers to execute arbitrary code, cause a denial of service DoS, escalate privileges, and obtain sensitive information via crafted payload to resetPassword, forgotPasswordProcess, saveUser, saveRole, deleteUser, deleteRole,...

CVE-2023-45503

SQL Injection vulnerability in Macrob7 Macs CMS 1.1.4f, allows remote attackers to execute arbitrary code, cause a denial of service DoS, escalate privileges, and obtain sensitive information via crafted payload to resetPassword, forgotPasswordProcess, saveUser, saveRole, deleteUser, deleteRole,...

Exploit for CVE-2023-44792

CVE-2023-45503 Vulnerability Details Overview In Macrob7...

PT-2023-28721 · Macrob7 · Macrob7 Macs Framework Content Management System

Name of the Vulnerable Software and Affected Versions: Macrob7 Macs Framework Content Management System CMS version 1.1.4f Description: The issue is related to a PHP type confusion vulnerability due to loose comparison in the isValidLogin function during a login attempt. This vulnerability can le...