102 matches found
Sql injection
SQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL commands via Author Center -Reader Comments -Search...
CVE-2023-29815
mccms v2.6.3 is vulnerable to Cross Site Request Forgery CSRF...
CVE-2023-29815
mccms v2.6.3 is vulnerable to Cross Site Request Forgery CSRF...
PT-2023-20797 · Mccms · Mccms
Name of the Vulnerable Software and Affected Versions: mccms version 2.6.1 Description: An issue in the Backend management interface, specifically in System Configuration-Cache Configuration-Cache security characters, allows remote attackers to cause a denial of service. Recommendations: For mccm...
CVE-2023-26782
An issue discovered in mccms 2.6.1 allows remote attackers to cause a denial of service via Backend management interface -System Configuration-Cache Configuration-Cache security characters...
CVE-2023-29815
mccms v2.6.3 is vulnerable to Cross Site Request Forgery CSRF...
PT-2023-20796 · Mccms · Mccms
Name of the Vulnerable Software and Affected Versions: mccms version 2.6 Description: The issue allows remote attackers to run arbitrary SQL commands via the Author Center -Reader Comments -Search function. This can be exploited by accessing the Author Center and then navigating to Reader Comment...
CVE-2023-26781
CVE-2023-26781 affects mccms 2.6. The vulnerability is a SQL injection in the Author Center → Reader Comments → Search function, enabling remote attackers to execute arbitrary SQL via user input. The entry consistently lists a critical impact with CVSS v3.1 base score 9.8 (AV:N/AC:L/PR:N/UI:N/S:U...
CVE-2023-29815
The CVE-2023-29815 entry affects mccms v2.6.3 and is a Cross Site Request Forgery (CSRF) vulnerability. The available sources confirm the vulnerable component (mccms v2.6.3) and classify the impact as high (CVSS: 8.8, NETWORK attack vector, user interaction required). Connected documents do not p...
CVE-2023-26781
SQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL commands via Author Center -Reader Comments -Search...
mccms SQL注入漏洞
mccms Man City CMS is a rapid website building system for individual developers of China Smokey River South chshcms. A security vulnerability exists in version 2.6 of mccms, which stems from the presence of a SQL injection vulnerability that allows remote attackers to run arbitrary SQL commands...
mccms 代码注入漏洞
mccms diffuse city CMS is China smoke and rain Jiangnan chshcms individual developers of a rapid site-building system. A code injection vulnerability exists in mccms version 2.6.1. A remote attacker could exploit this vulnerability to cause a denial of service...
PT-2023-22429 · Mccms · Mccms
Name of the Vulnerable Software and Affected Versions: mccms version 2.6.3 Description: The issue is related to Cross Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. No information is provided about the estimated...
CVE-2023-26782
CVE-2023-26782 applies to mccms 2.6.1. The issue is a DoS vulnerability in the Backend management interface, specifically under System Configuration → Cache Configuration → Cache security characters. The available documents identify the affected software and the vulnerable path but do not provide...
CVE-2023-26781
SQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL commands via Author Center -Reader Comments -Search...
CVE-2023-29815
mccms v2.6.3 is vulnerable to Cross Site Request Forgery CSRF...
CVE-2023-26782
An issue discovered in mccms 2.6.1 allows remote attackers to cause a denial of service via Backend management interface -System Configuration-Cache Configuration-Cache security characters...
mccms 跨站请求伪造漏洞
mccms diffuse city CMS is a rapid website building system for individual developers of China Smokey River South chshcms. A security vulnerability exists in mccms version v2.6.3. An attacker exploited the vulnerability to perform cross-site request forgery CSRF attacks...
