PT-2024-32096 · Maccms10 · Maccms10

Name of the Vulnerable Software and Affected Versions: Maccms10 version 2024.1000.4040 Description: A stored cross-site scripting XSS vulnerability in the Add Scheduled Task module allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Recommendations: For Maccms10 versi...

maccms10 安全漏洞

maccms10 is magicblack open source a set of PHP + MYSQL environment running under the perfect and powerful rapid website building system. A security vulnerability exists in maccms10 version v2024.1000.4040, which stems from the presence of a stored cross-site scripting XSS vulnerability that allo...

CVE-2024-46654: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the Add Scheduled Task module of Maccms10 v2024.1000.4040 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2024-46654

A stored cross-site scripting XSS vulnerability in the Add Scheduled Task module of Maccms10 v2024.1000.4040 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2024-46654

The Maccms10 rapid website building system (version v2024.1000.4040 ) is vulnerable to a stored cross-site scripting (XSS) vulnerability in its Add Scheduled Task module. This flaw allows an attacker to execute arbitrary web scripts or HTML by providing a crafted payload. As a remediation measure...

CVE-2024-46654

A stored cross-site scripting XSS vulnerability in the Add Scheduled Task module of Maccms10 v2024.1000.4040 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

maccms10 安全漏洞

maccms10 is magicblack open source a set of PHP + MYSQL environment running under the perfect and powerful rapid site building system. A security vulnerability exists in maccms10 version v.2024.1000.3000, which stems from the presence of a cross-site scripting vulnerability that could allow a...

CVE-2022-47872

A Server-Side Request Forgery SSRF in maccms10 v2021.1000.2000 allows attackers to force the application to make arbitrary requests via a crafted payload injected into the Name parameter under the Interface address module...

Server side request forgery (ssrf)

A Server-Side Request Forgery SSRF in maccms10 v2021.1000.2000 allows attackers to force the application to make arbitrary requests via a crafted payload injected into the Name parameter under the Interface address module...

maccms10 代码问题漏洞

maccms10 is magicblack open source PHP+MYSQL environment using a set of perfect and powerful rapid site building system . maccms10 2021.1000.2000 version of the code problematic vulnerability , the vulnerability stems from its allows attackers to achieve server-side request forgery...

CVE-2022-47872

A Server-Side Request Forgery SSRF in maccms10 v2021.1000.2000 allows attackers to force the application to make arbitrary requests via a crafted payload injected into the Name parameter under the Interface address module...

CVE-2022-47872: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF in maccms10 v2021.1000.2000 allows attackers to force the application to make arbitrary requests via a crafted payload injected into the Name parameter under the Interface address module...

CVE-2022-47872

The CVE-2022-47872 entry concerns maccms10 (version 2021.1000.2000) with a Server-Side Request Forgery (SSRF) via a crafted payload in the Name parameter of the Interface address module. The root cause is not explicitly detailed in the core entry, but the vulnerability allows the application to f...

PT-2023-15504 · Maccms10 · Maccms10

Name of the Vulnerable Software and Affected Versions: maccms10 version 2021.1000.2000 Description: A Server-Side Request Forgery SSRF issue allows attackers to force the application to make arbitrary requests via a crafted payload injected into the Name parameter under the Interface address...

CVE-2022-44870

A reflected cross-site scripting XSS vulnerability in maccms10 v2022.1000.3032 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the AD Management module...

CVE-2022-44870

A reflected cross-site scripting XSS vulnerability in maccms10 v2022.1000.3032 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the AD Management module...

PT-2023-14563 · Maccms10 · Maccms10

Name of the Vulnerable Software and Affected Versions: maccms10 version 2022.1000.3032 Description: A reflected cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the AD Management module...

maccms10 跨站脚本漏洞

maccms10 is magicblack open source PHP+MYSQL environment using a set of perfect and powerful rapid site-building system . maccms10 v2022.1000.3032 version of cross-site scripting XSS vulnerabilities. A cross-site scripting XSS vulnerability exists in maccms10 version v2022.1000.3032, which...

CVE-2022-44870

A reflected cross-site scripting XSS vulnerability in maccms10 v2022.1000.3032 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the AD Management module...

CVE-2022-44870: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in maccms10 v2022.1000.3032 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the AD Management module...