110 matches found
CVE-2020-21362
A cross site scripting XSS vulnerability in the background search function of Maccms10 allows attackers to execute arbitrary web scripts or HTML via the 'wd' parameter...
Cross site scripting
A cross site scripting XSS vulnerability in the background search function of Maccms10 allows attackers to execute arbitrary web scripts or HTML via the 'wd' parameter...
Arbitrary file deletion
An arbitrary file deletion vulnerability exists within Maccms10...
Design/Logic Flaw
An arbitrary file upload vulnerability in the Template Upload function of Maccms10 allows attackers bypass the suffix whitelist verification to execute arbitrary code via adding a character to the end of the uploaded file's name...
CVE-2020-21363
An arbitrary file deletion vulnerability exists within Maccms10...
CVE-2020-21363
Summary: CVE-2020-21363 affects Maccms10, a PHP-based CMS. The connected sources describe an arbitrary file deletion vulnerability caused by inadequate input validation, enabling an attacker to delete arbitrary files on the service via network exposure. No specific exploit details, affected versi...
CVE-2020-21362
CVE-2020-21362 affects Maccms 10 (a PHP-based CMS). The issue is a cross-site scripting vulnerability in the background search function, exploitable via the 'wd' parameter, allowing an attacker to inject and render arbitrary web scripts or HTML. Connected documents corroborate the vulnerable comp...
CVE-2020-21362
A cross site scripting XSS vulnerability in the background search function of Maccms10 allows attackers to execute arbitrary web scripts or HTML via the 'wd' parameter...
CVE-2020-21359
An arbitrary file upload vulnerability in the Template Upload function of Maccms10 allows attackers bypass the suffix whitelist verification to execute arbitrary code via adding a character to the end of the uploaded file's name...
CVE-2020-21359
CVE-2020-21359 affects Maccms10. An arbitrary file upload vulnerability exists in the Template Upload function, where an attacker can bypass the suffix whitelist verification by adding a character to the end of the uploaded file name, enabling arbitrary code execution. Connected sources corrobora...