347 matches found
Cross site request forgery (csrf)
A Cross-Site Request Forgery CSRF in the component admin.php/admin/type/info.html of Maccms 10 allows attackers to gain administrator privileges...
Cross site scripting
A cross-site scripting XSS vulnerability in the parameter typeen of Maccms 10 allows attackers to obtain the administrator cookie and escalate privileges via a crafted payload...
CVE-2020-21387
A cross-site scripting XSS vulnerability in the parameter typeen of Maccms 10 allows attackers to obtain the administrator cookie and escalate privileges via a crafted payload...
CVE-2020-21387
CVE-2020-21387 is an XSS vulnerability in the parameter type_en of Maccms 10 (a PHP CMS for film/TV). The issue arises from inadequate handling of input in the type_en parameter, enabling an attacker to craft a payload that can steal the administrator cookie and escalate privileges. The linked do...
CVE-2020-21386
A Cross-Site Request Forgery CSRF in the component admin.php/admin/type/info.html of Maccms 10 allows attackers to gain administrator privileges...
CVE-2020-21386
CVE-2020-21386 is a CSRF vulnerability in Maccms 10 affecting the component admin.php/admin/type/info.html. The issue arises from its admin flow failing to verify that requests originate from trusted users, enabling an attacker to gain administrator privileges. The connected documents consistentl...
Maccms 跨站脚本漏洞
Maccms is a PHP-based content management system CMS for film and television. A cross-site scripting vulnerability exists in Mccms10, which stems from the fact that the nickname in the editing function under the Member module of the product fails to properly validate user input data. An attacker c...
Maccms 跨站脚本漏洞
Maccms is a PHP-based content management system CMS for film and television. A cross-site scripting vulnerability exists in Macmms 10, which stems from a failure to properly handle data for the typeen parameter in the product. An attacker could obtain an administrator cookie and escalate privileg...
Maccms 跨站请求伪造漏洞
Maccms is a PHP-based content management system CMS for film and television. A cross-site request forgery vulnerability exists in Macmms 10, which stems from the failure of the admin.php/admin/type/info.html page in the product to verify that requests originate from trusted users. An attacker cou...
PT-2021-10620
Name of the Vulnerable Software and Affected Versions: Maccms version 10 Description: A Cross-Site Request Forgery CSRF issue in the component "admin.php/admin/type/info.html" allows attackers to gain administrator privileges. Recommendations: For Maccms version 10, consider disabling access to t...
PT-2021-10624
Name of the Vulnerable Software and Affected Versions: Maccms version 10 Description: The issue is related to a cross-site scripting XSS vulnerability in the Editing function under the Member module. This vulnerability can be exploited via a crafted payload in the nickname text field...
PT-2021-10621
Name of the Vulnerable Software and Affected Versions: Maccms version 10 Description: A cross-site scripting XSS vulnerability in the type en parameter allows attackers to obtain the administrator cookie and escalate privileges via a crafted payload. Recommendations: For Maccms version 10, consid...
CVE-2020-21434: Improper Neutralization of Input During Web Page Generation
Maccms 10 contains a cross-site scripting XSS vulnerability in the Editing function under the Member module. This vulnerability is exploited via a crafted payload in the nickname text field...
CVE-2020-21387: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in the parameter typeen of Maccms 10 allows attackers to obtain the administrator cookie and escalate privileges via a crafted payload...
CVE-2020-21386: Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF in the component admin.php/admin/type/info.html of Maccms 10 allows attackers to gain administrator privileges...
Maccms Cross-site Request Forgery Vulnerability (CNVD-2022-13188)
Maccms is a PHP-based film and television content management system CMS. Maccms version 10 has a security vulnerability that can be exploited by an authenticated attacker to delete all users via "admin.php/admin/admin/del/ids/＜id＞.html"...
CVE-2020-20514
A Cross-Site Request Forgery CSRF in Maccms v10 via admin.php/admin/admin/del/ids/.html allows authenticated attackers to delete all users...
CVE-2020-20514
A Cross-Site Request Forgery CSRF in Maccms v10 via admin.php/admin/admin/del/ids/.html allows authenticated attackers to delete all users...