110 matches found
CVE-2022-44870
A reflected cross-site scripting XSS vulnerability in maccms10 v2022.1000.3032 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the AD Management module...
CVE-2022-44870
The CVE-2022-44870 issue is a reflected XSS in maccms10 v2022.1000.3032. The vulnerability is triggered by a crafted payload injected into the Name parameter in the AD Management module, enabling an attacker to execute arbitrary web scripts or HTML in the user’s browser. Documented impact is limi...
CVE-2022-44870
A reflected cross-site scripting XSS vulnerability in maccms10 v2022.1000.3032 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the AD Management module...
CVE-2022-35148
maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection vulnerability via the table parameter at database/columns.html...
CVE-2022-35148
maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection vulnerability via the table parameter at database/columns.html...
Sql injection
maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection vulnerability via the table parameter at database/columns.html...
CVE-2022-35148
maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection vulnerability via the table parameter at database/columns.html...
CVE-2022-35148
The CVE-2022-35148 entry concerns maccms10 versions from v2021.1000.1081 to v2022.1000.3031, where a SQL injection exists via the table parameter on the database/columns.html endpoint. Root cause: unsafe handling of the table parameter leads to injection. Impact is described as SQL injection; no ...
maccms10 SQL注入漏洞
maccms10 is magicblack open source PHP+MYSQL environment using a set of perfect and powerful rapid site building system . maccms10 v2021.1000.1081 to v2022.1000.3031 version of a security vulnerability , the vulnerability stems from its database/columns.html page table parameters exist SQL...
CVE-2022-31303
maccms10 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...
CVE-2022-31303
maccms10 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...
CVE-2022-31303
maccms10 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...
Cross site scripting
maccms10 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...
CVE-2022-31303
maccms10 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...
CVE-2022-31303
CVE-2022-31303 affects maccms10 and is a stored XSS vulnerability via the Server Group text field. The issue is documented across multiple sources (NVD, Red Hat, CVE lists, CNNVD, etc.) and pertains to stored user input that could be reflected/executed in the CMS. Publicly disclosed details expli...
CVE-2020-21359
An arbitrary file upload vulnerability in the Template Upload function of Maccms10 allows attackers bypass the suffix whitelist verification to execute arbitrary code via adding a character to the end of the uploaded file's name...
CVE-2020-21363
An arbitrary file deletion vulnerability exists within Maccms10...
CVE-2020-21359
An arbitrary file upload vulnerability in the Template Upload function of Maccms10 allows attackers bypass the suffix whitelist verification to execute arbitrary code via adding a character to the end of the uploaded file's name...