CVE-2020-20514

CVE-2020-20514 describes a Cross-Site Request Forgery (CSRF) in Maccms v10. The vulnerability is triggered via the URL path admin.php/admin/admin/del/ids/.html and, when exploited by an authenticated attacker, can cause deletion of all users. Documents consistently reference Maccms v10 and the sa...

Maccms 跨站请求伪造漏洞

Maccms is a PHP-based film and television content management system CMS. Maccms version 10 has a security vulnerability that can be exploited by an authenticated attacker to delete all users via "admin.php/admin/admin/del/ids/＜id＞.html"...

PT-2021-10504

Name of the Vulnerable Software and Affected Versions: Maccms version 10 Description: A Cross-Site Request Forgery CSRF issue allows authenticated attackers to delete all users via the API endpoint "admin.php/admin/admin/del/ids/.html". Recommendations: For Maccms version 10, as a temporary...

CVE-2020-20514: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in Maccms v10 via admin.php/admin/admin/del/ids/ .html allows authenticated attackers to delete all users...

Maccms Cross-Site Scripting Vulnerability (CNVD-2021-74101)

A security vulnerability exists in Maccms, a PHP-based film and television content management system CMS, due to a failure to validate data in the Chinese and English fields in the product's backend administrator post management module. An attacker can obtain administrator and user cookies throug...

Maccms Cross-site Request Forgery Vulnerability

Maccms is a PHP-based content management system CMS for film and television. Maccms suffers from a cross-site request forgery vulnerability, which stems from the fact that links to add and edit articles to the product fail to validate that the request came from a trusted user. An attacker could a...

CVE-2020-21082

A cross-site scripting XSS vulnerability in the background administrator article management module of Maccms 8.0 allows attackers to steal administrator and user cookies via crafted payloads in the text fields for Chinese and English names...

CVE-2020-21081

A cross-site request forgery CSRF in Maccms 8.0 causes administrators to add and modify articles without their knowledge via clicking on a crafted URL...

CVE-2020-21081

A cross-site request forgery CSRF in Maccms 8.0 causes administrators to add and modify articles without their knowledge via clicking on a crafted URL...

CVE-2020-21082

A cross-site scripting XSS vulnerability in the background administrator article management module of Maccms 8.0 allows attackers to steal administrator and user cookies via crafted payloads in the text fields for Chinese and English names...

Cross site scripting

A cross-site scripting XSS vulnerability in the background administrator article management module of Maccms 8.0 allows attackers to steal administrator and user cookies via crafted payloads in the text fields for Chinese and English names...

Cross site request forgery (csrf)

A cross-site request forgery CSRF in Maccms 8.0 causes administrators to add and modify articles without their knowledge via clicking on a crafted URL...

CVE-2020-21082

A cross-site scripting XSS vulnerability in the background administrator article management module of Maccms 8.0 allows attackers to steal administrator and user cookies via crafted payloads in the text fields for Chinese and English names...

CVE-2020-21082

CVE-2020-21082 affects Maccms 8.0, specifically the background administrator article management module. The vulnerability is a cross-site scripting (XSS) flaw that enables theft of administrator and user cookies via crafted payloads in the Chinese and English name fields. Exploitation details are...

CVE-2020-21081

A cross-site request forgery CSRF in Maccms 8.0 causes administrators to add and modify articles without their knowledge via clicking on a crafted URL...

CVE-2020-21081

CVE-2020-21081 is a CSRF vulnerability in Maccms 8.0. The issue arises from insufficient request validation for article add/edit actions, allowing an attacker to manipulate content by luring an administrator to a crafted URL. Affected product: Maccms 8.0 (CMS for film/TV). Root cause: lack of pro...

Maccms 跨站脚本漏洞

A security vulnerability exists in Maccms, a PHP-based film and television content management system CMS, due to a failure to validate data in the Chinese and English fields in the product's backend administrator post management module. An attacker can obtain administrator and user cookies throug...

Maccms 跨站请求伪造漏洞

Maccms is a PHP-based content management system CMS for film and television. Maccms suffers from a cross-site request forgery vulnerability, which stems from the fact that links to add and edit articles to the product fail to validate that the request came from a trusted user. An attacker could a...

PT-2021-10584

Name of the Vulnerable Software and Affected Versions: Maccms version 8.0 Description: A cross-site scripting XSS vulnerability in the background administrator article management module allows attackers to steal administrator and user cookies via crafted payloads in the text fields for Chinese an...

PT-2021-10583

Name of the Vulnerable Software and Affected Versions: Maccms version 8.0 Description: A cross-site request forgery CSRF issue allows attackers to trick administrators into adding and modifying articles without their knowledge by clicking on a crafted URL. Recommendations: For Maccms version 8.0,...