CVE-2022-44870

CVE-2022-44870 maccms admin+ xss attacks Overview Manufacturer's website information：https://maccms.pro Source code download address ： https://github.com/maccmspro/maccms10.git 1. Affected version: V2021.1000.2000 2.Vulnerability details https://github.com/maccmspro/maccms10/issues/23 Go to...

CVE-2026-116214

MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability that allows unauthenticated attackers to reset any member's password because checkmsg never compares msgto. Attackers can request a recovery code to their own mailbox via user/findpassmsg, then submit it to...

CVE-2026-116216

MacCMS v10 through 2026.1000.4056 contains a mass assignment vulnerability in index/Comment::saveData that allows unauthenticated attackers to set arbitrary maccomment columns including userid. Attackers can submit anonymous comments with a crafted userid parameter to attribute them to any...

CVE-2026-116215

MacCMS v10 through 2026.1000.4056 contains a race condition vulnerability in Card::useData that allows authenticated members to redeem one recharge card multiple times via the user/buy endpoint. Attackers can send many concurrent flag=card requests that pass the non-locking card read before it is...

CVE-2026-116216

MacCMS versions v10 through 2026.1000.4056 are vulnerable to a mass assignment vulnerability in the index/Comment::saveData() function. This flaw allows unauthenticated attackers to manipulate mac_comment columns, specifically the user_id parameter. By submitting a crafted user_id, an attacker ca...

EUVD-2026-109808

MacCMS v10 through 2026.1000.4056 contains a mass assignment vulnerability in index/Comment::saveData that allows unauthenticated attackers to set arbitrary maccomment columns including userid. Attackers can submit anonymous comments with a crafted userid parameter to attribute them to any...

CVE-2026-116214

MacCMS v10 versions prior to 2026.1000.4054 are susceptible to an authentication bypass vulnerability. The root cause is that the check_msg() function fails to compare the msg_to parameter. This allows unauthenticated attackers to perform an account takeover by requesting a recovery code to their...

CVE-2026-116215

MacCMS versions v10 through 2026.1000.4056 are vulnerable to a race condition in the Card::useData() function. This flaw allows authenticated members to redeem a single recharge card multiple times by sending concurrent flag=card requests via the user/buy endpoint. Because the system performs a n...

EUVD-2026-109807

MacCMS v10 through 2026.1000.4056 contains a race condition vulnerability in Card::useData that allows authenticated members to redeem one recharge card multiple times via the user/buy endpoint. Attackers can send many concurrent flag=card requests that pass the non-locking card read before it is...

EUVD-2026-109806

MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability that allows unauthenticated attackers to reset any member's password because checkmsg never compares msgto. Attackers can request a recovery code to their own mailbox via user/findpassmsg, then submit it to...

EUVD-2026-102500

MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over member accounts. Attackers knowing a victim's email or phone can request a code and brute-force findpassreset to overwrite the member's password...

CVE-2026-111356

MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over member accounts. Attackers knowing a victim's email or phone can request a code and brute-force findpassreset to overwrite the member's password...

CVE-2026-111356 MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force

MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over member accounts. Attackers knowing a victim's email or phone can request a code and brute-force findpassreset to overwrite the member's password...

CVE-2026-111356

MacCMS versions v10 through 2026.1000.4056 are vulnerable to an Account Takeover due to a lack of rate limiting on the six-digit password recovery code. An unauthenticated attacker who knows a victim's email or phone number can request a recovery code and perform a brute-force attack on the findp...

CVE-2026-111356 MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force

MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over member accounts. Attackers knowing a victim's email or phone can request a code and brute-force findpassreset to overwrite the member's password...

CVE-2026-111356: Improper Restriction of Excessive Authentication Attempts

MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over member accounts. Attackers knowing a victim's email or phone can request a code and brute-force findpassreset to overwrite the member's password...

CVE-2026-75465

The /api.php/user/getlist endpoint in Maccms v10 v2026.1000.4055 is vulnerable to an Incorrect Access Control issue. The interface fails to perform any authentication or authorization checks. An unauthenticated remote attacker can send a crafted HTTP GET request with limit and offset parameters t...

CVE-2026-75465: Improper Access Control

The /api.php/user/getlist endpoint in Maccms v10 v2026.1000.4055 is vulnerable to an Incorrect Access Control issue. The interface fails to perform any authentication or authorization checks. An unauthenticated remote attacker can send a crafted HTTP GET request with limit and offset parameters t...

EUVD-2026-66179

The /api.php/user/getlist endpoint in Maccms v10 v2026.1000.4055 is vulnerable to an Incorrect Access Control issue. The interface fails to perform any authentication or authorization checks. An unauthenticated remote attacker can send a crafted HTTP GET request with limit and offset parameters t...

CVE-2026-75465

The /api.php/user/getlist endpoint in Maccms v10 v2026.1000.4055 is vulnerable to an Incorrect Access Control issue. The interface fails to perform any authentication or authorization checks. An unauthenticated remote attacker can send a crafted HTTP GET request with limit and offset parameters t...