316 matches found
CVE-2021-45786
In maccms v10, an attacker can log in through /index.php/user/login in the "col" and "openid" parameters to gain privileges...
Cross site scripting
There is a stored Cross Site Scripting XSS vulnerability in maccms v10 through adding videos. XSS code can be inserted at parameter positions including name and remarks...
Code injection
In maccms v10, an attacker can log in through /index.php/user/login in the "col" and "openid" parameters to gain privileges...
CVE-2021-45787
CVE-2021-45787 affects Maccms v10, with a stored XSS vulnerability when adding videos. XSS payloads can be injected via input fields such as name and remarks due to inadequate data validation/output filtering, as confirmed by multiple sources (NVD/CNVD/CNNVD). The connected documents do not provi...
CVE-2021-45787
There is a stored Cross Site Scripting XSS vulnerability in maccms v10 through adding videos. XSS code can be inserted at parameter positions including name and remarks...
CVE-2021-45786
In maccms v10, an attacker can log in through /index.php/user/login in the "col" and "openid" parameters to gain privileges...
CVE-2021-45786
CVE-2021-45786 affects the Maccms v10 system. The provided documents describe a privilege escalation where an attacker can log in via /index.php/user/login using the parameters col and openid to obtain privileges. This is consistently reported across NVD/CNVD/other records in the supplied sources...
Maccms 跨站脚本漏洞
Maccms is a PHP-based video content management system CMS. v10 version of Maccms is vulnerable to a cross-site scripting vulnerability that stems from the program's lack of data validation filtering of user-supplied data and output. An attacker can use the vulnerability to attack through the...
CVE-2021-45787: Improper Neutralization of Input During Web Page Generation
There is a stored Cross Site Scripting XSS vulnerability in maccms v10 through adding videos. XSS code can be inserted at parameter positions including name and remarks...
CVE-2021-45786: Improper Authentication
In maccms v10, an attacker can log in through /index.php/user/login in the "col" and "openid" parameters to gain privileges...
Maccms 授权问题漏洞
Maccms program is a complete and powerful fast website building system running in PHP MYSQL environment. Maccms has an elevation of privilege vulnerability, which can be exploited by attackers to gain privileges through the "col" and "openid" parameters in /index.php/user/login to obtain privileg...
Maccms Cross-Site Scripting Vulnerability (CNVD-2021-88955)
Maccms is a PHP-based content management system CMS for film and television. A cross-site scripting vulnerability exists in Mccms10, which stems from the fact that the nickname in the editing function under the Member module of the product fails to properly validate user input data. An attacker c...
Maccms Cross-site Request Forgery Vulnerability (CNVD-2021-88953)
Maccms is a PHP-based content management system CMS for film and television. A cross-site request forgery vulnerability exists in Macmms 10, which stems from the failure of the admin.php/admin/type/info.html page in the product to verify that requests originate from trusted users. An attacker cou...
CVE-2020-21434
Maccms 10 contains a cross-site scripting XSS vulnerability in the Editing function under the Member module. This vulnerability is exploited via a crafted payload in the nickname text field...
CVE-2020-21434
Maccms 10 contains a cross-site scripting XSS vulnerability in the Editing function under the Member module. This vulnerability is exploited via a crafted payload in the nickname text field...
Cross site scripting
Maccms 10 contains a cross-site scripting XSS vulnerability in the Editing function under the Member module. This vulnerability is exploited via a crafted payload in the nickname text field...
CVE-2020-21434
CVE-2020-21434 affects Maccms 10. The vulnerability is a cross-site scripting (XSS) flaw in the Editing function under the Member module, exploitable via a crafted payload in the nickname field. Root cause: lack of proper input validation allowing script execution. Impact: client-side code execut...
CVE-2020-21434
Maccms 10 contains a cross-site scripting XSS vulnerability in the Editing function under the Member module. This vulnerability is exploited via a crafted payload in the nickname text field...