69 matches found
mkCMS v6.2.6 SQL Injection Vulnerability in Backend
mkCMS is a free and open source PHP content management system, small yet powerful, with tons of templates and more. mkCMS v6.2.6 has a SQL injection vulnerability in the background, which can be exploited by attackers to obtain sensitive information from the database...
SQL Injection Vulnerability in mkcms Backend
mkcms is a film and television management system developed specifically for different webmasters. There are SQL injection vulnerabilities in the mkcms backend, which can be exploited by attackers to gain access to sensitive database information...
MKCMS suffers from SQL injection vulnerability (CNVD-2020-33188)
MKCMS is a film and television management system, support for independent modification, users can directly upload the server to generate a website platform, you can add the background to modify the project and so on. MKCMS SQL injection vulnerability, attackers can use the vulnerability to obtain...
MKCMS suffers from SQL injection vulnerability
MKCMS is a content management system. MKCMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
PinYou Movie MKCMS v5.0 suffers from SQL Injection Vulnerability
PinYou film and television to provide VIP video resolution of the film and television station source code, automatic update maintenance. MKCMS v5.0 has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...
CVE-2019-11332
MKCMS 5.0 allows remote attackers to take over arbitrary user accounts by posting a username and e-mail address to ucenter/repass.php, which triggers e-mail transmission with the password, as demonstrated by 123456...
Default credentials
MKCMS 5.0 allows remote attackers to take over arbitrary user accounts by posting a username and e-mail address to ucenter/repass.php, which triggers e-mail transmission with the password, as demonstrated by 123456...
CVE-2019-11332
MKCMS 5.0 allows remote attackers to take over arbitrary user accounts by posting a username and e-mail address to ucenter/repass.php, which triggers e-mail transmission with the password, as demonstrated by 123456...
CVE-2019-11332
The CVE-2019-11332 entry concerns MKCMS 5.0. Affected component: the repass.php flow in ucenter. The issue allows remote attackers to takeover arbitrary user accounts by posting a username and e-mail address, which triggers an e‑mail containing the user’s password (demo: 123456). The Red Hat and ...
PT-2019-12245
Name of the Vulnerable Software and Affected Versions MKCMS version 5.0 Description The issue allows remote attackers to take control of arbitrary user accounts. This is achieved by posting a username and an e-mail address to the "ucenter/repass.php" endpoint, which then triggers the transmission...
CVE-2019-11332: Undefined Security Weakness
MKCMS 5.0 allows remote attackers to take over arbitrary user accounts by posting a username and e-mail address to ucenter/repass.php, which triggers e-mail transmission with the password, as demonstrated by 123456...
Cross site request forgery (csrf)
MKCMS V5.0 has a CSRF vulnerability to add a new admin user via the ucenter/userinfo.php URI...
CVE-2019-11078
MKCMS V5.0 has a CSRF vulnerability to add a new admin user via the ucenter/userinfo.php URI...
CVE-2019-11078
MKCMS V5.0 has a CSRF vulnerability to add a new admin user via the ucenter/userinfo.php URI...
CVE-2019-11078
Summary: CVE-2019-11078 affects MKCMS V5.0, where a CSRF flaw in the ucenter/userinfo.php endpoint allows adding a new admin user. The underlying issue is lack of proper request validation, enabling an attacker-controlled cross-site request to perform privileged action without user consent. Impac...
PT-2019-12167
Name of the Vulnerable Software and Affected Versions MKCMS version 5.0 Description The issue allows for a CSRF attack to add a new admin user via the "ucenter/userinfo.php" URI. Recommendations For MKCMS version 5.0, update to a version that includes a fix for this issue, or as a temporary...
CVE-2019-11078: Cross-Site Request Forgery (CSRF)
MKCMS V5.0 has a CSRF vulnerability to add a new admin user via the ucenter/userinfo.php URI...
MKCMS SQL Injection Vulnerability
MKCMS is a content management system. A SQL injection vulnerability exists in MKCMS version V5.0. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit this vulnerability to execute illegal SQL commands...
