141 matches found
CVE-2020-21362
A cross site scripting XSS vulnerability in the background search function of Maccms10 allows attackers to execute arbitrary web scripts or HTML via the 'wd' parameter...
CVE-2020-21359
An arbitrary file upload vulnerability in the Template Upload function of Maccms10 allows attackers bypass the suffix whitelist verification to execute arbitrary code via adding a character to the end of the uploaded file's name...
CVE-2020-21359
An arbitrary file upload vulnerability in the Template Upload function of Maccms10 allows attackers bypass the suffix whitelist verification to execute arbitrary code via adding a character to the end of the uploaded file's name...
CVE-2020-21362
A cross site scripting XSS vulnerability in the background search function of Maccms10 allows attackers to execute arbitrary web scripts or HTML via the 'wd' parameter...
CVE-2020-21363
An arbitrary file deletion vulnerability exists within Maccms10...
CVE-2020-21363
An arbitrary file deletion vulnerability exists within Maccms10...
Arbitrary file deletion
An arbitrary file deletion vulnerability exists within Maccms10...
Cross site scripting
A cross site scripting XSS vulnerability in the background search function of Maccms10 allows attackers to execute arbitrary web scripts or HTML via the 'wd' parameter...
Design/Logic Flaw
An arbitrary file upload vulnerability in the Template Upload function of Maccms10 allows attackers bypass the suffix whitelist verification to execute arbitrary code via adding a character to the end of the uploaded file's name...
CVE-2020-21363
An arbitrary file deletion vulnerability exists within Maccms10...
CVE-2020-21363
Summary: CVE-2020-21363 affects Maccms10, a PHP-based CMS. The connected sources describe an arbitrary file deletion vulnerability caused by inadequate input validation, enabling an attacker to delete arbitrary files on the service via network exposure. No specific exploit details, affected versi...
CVE-2020-21362
A cross site scripting XSS vulnerability in the background search function of Maccms10 allows attackers to execute arbitrary web scripts or HTML via the 'wd' parameter...
CVE-2020-21362
CVE-2020-21362 affects Maccms 10 (a PHP-based CMS). The issue is a cross-site scripting vulnerability in the background search function, exploitable via the 'wd' parameter, allowing an attacker to inject and render arbitrary web scripts or HTML. Connected documents corroborate the vulnerable comp...
CVE-2020-21359
An arbitrary file upload vulnerability in the Template Upload function of Maccms10 allows attackers bypass the suffix whitelist verification to execute arbitrary code via adding a character to the end of the uploaded file's name...
CVE-2020-21359
CVE-2020-21359 affects Maccms10. An arbitrary file upload vulnerability exists in the Template Upload function, where an attacker can bypass the suffix whitelist verification by adding a character to the end of the uploaded file name, enabling arbitrary code execution. Connected sources corrobora...
PT-2021-10617
Name of the Vulnerable Software and Affected Versions: Maccms10 affected versions not specified Description: The issue concerns an arbitrary file upload vulnerability in the Template Upload function, allowing attackers to bypass the suffix whitelist verification. This can be exploited by adding a...
CVE-2020-21363: Externally Controlled Reference to a Resource in Another Sphere
An arbitrary file deletion vulnerability exists within Maccms10...
CVE-2020-21359: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the Template Upload function of Maccms10 allows attackers bypass the suffix whitelist verification to execute arbitrary code via adding a character to the end of the uploaded file's name...
CVE-2020-21362: Improper Neutralization of Input During Web Page Generation
A cross site scripting XSS vulnerability in the background search function of Maccms10 allows attackers to execute arbitrary web scripts or HTML via the 'wd' parameter...
PT-2021-10619
Name of the Vulnerable Software and Affected Versions: Maccms10 affected versions not specified Description: An arbitrary file deletion vulnerability exists within Maccms10. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...