CVE-2022-44870

A reflected cross-site scripting XSS vulnerability in maccms10 v2022.1000.3032 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the AD Management module...

PT-2023-14563 · Maccms10 · Maccms10

Name of the Vulnerable Software and Affected Versions: maccms10 version 2022.1000.3032 Description: A reflected cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the AD Management module...

CVE-2022-44870

The CVE-2022-44870 issue is a reflected XSS in maccms10 v2022.1000.3032. The vulnerability is triggered by a crafted payload injected into the Name parameter in the AD Management module, enabling an attacker to execute arbitrary web scripts or HTML in the user’s browser. Documented impact is limi...

CVE-2022-44870: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in maccms10 v2022.1000.3032 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the AD Management module...

CVE-2022-35148

maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection vulnerability via the table parameter at database/columns.html...

CVE-2022-35148

maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection vulnerability via the table parameter at database/columns.html...

Sql injection

maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection vulnerability via the table parameter at database/columns.html...

CVE-2022-35148

maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection vulnerability via the table parameter at database/columns.html...

CVE-2022-35148

maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection vulnerability via the table parameter at database/columns.html...

CVE-2022-35148

The CVE-2022-35148 entry concerns maccms10 versions from v2021.1000.1081 to v2022.1000.3031, where a SQL injection exists via the table parameter on the database/columns.html endpoint. Root cause: unsafe handling of the table parameter leads to injection. Impact is described as SQL injection; no ...

maccms10 SQL注入漏洞

maccms10 is magicblack open source PHP+MYSQL environment using a set of perfect and powerful rapid site building system . maccms10 v2021.1000.1081 to v2022.1000.3031 version of a security vulnerability , the vulnerability stems from its database/columns.html page table parameters exist SQL...

CVE-2022-35148: Improper Neutralization of Special Elements used in an SQL Command

maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection vulnerability via the table parameter at database/columns.html...

CVE-2022-31303

maccms10 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...

CVE-2022-31303

maccms10 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...

CVE-2022-31303

maccms10 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...

Cross site scripting

maccms10 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...

CVE-2022-31303

maccms10 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...

CVE-2022-31303

CVE-2022-31303 affects maccms10 and is a stored XSS vulnerability via the Server Group text field. The issue is documented across multiple sources (NVD, Red Hat, CVE lists, CNNVD, etc.) and pertains to stored user input that could be reflected/executed in the CMS. Publicly disclosed details expli...

PT-2022-20679

Name of the Vulnerable Software and Affected Versions maccms10 affected versions not specified Description The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability was found in the Server Group text field, which allows an attacker to inject malicious scripts. Th...

CVE-2022-31303: Improper Neutralization of Input During Web Page Generation

maccms10 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...