111 matches found
CVE-2025-10122
The CVE-2025-10122 entry concerns Maccms10 2025.1000.4050, with the SQL injection vulnerability located in the rep function of application/admin/controller/Database.php. The vulnerability arises from manipulation of the where argument, enabling remote exploitation and reportedly with a public exp...
CVE-2025-45474
maccms10 v2025.1000.4047 is vulnerable to Server-side request forgery SSRF in Email Settings...
CVE-2025-45474
maccms10 v2025.1000.4047 is vulnerable to Server-side request forgery SSRF in Email Settings...
CVE-2025-45474
maccms10 v2025.1000.4047 is vulnerable to Server-side request forgery SSRF in Email Settings...
CVE-2025-45474
CVE-2025-45474 affects maccms10 v2025.1000.4047, with a Server-Side Request Forgery (SSRF) vulnerability in Email Settings. The connected sources corroborate SSRF as the issue and note limited public remediation: a temporary workaround is to restrict access to Email Settings until a patch is avai...
PT-2025-23170 · Maccms10 · Maccms10
Name of the Vulnerable Software and Affected Versions: maccms10 version 2025.1000.4047 Description: The issue is related to Server-side request forgery SSRF in Email Settings. This means that an attacker could potentially forge requests to internal or external services, bypassing normal security...
CVE-2025-45474
maccms10 v2025.1000.4047 is vulnerable to Server-side request forgery SSRF in Email Settings...
CVE-2025-45475
maccms10 v2025.1000.4047 is vulnerable to Server-Side request forgery SSRF in Friend Link Management...
CVE-2025-45475
maccms10 v2025.1000.4047 is vulnerable to Server-Side request forgery SSRF in Friend Link Management...
CVE-2025-45475
CVE-2025-45475 affects maccms10 v2025.1000.4047 with Server-Side Request Forgery (SSRF) in the Friend Link Management feature. The public records in the provided documents identify the affected product and component (Friend Link Management) and the underlying issue as SSRF, but do not disclose sp...
CVE-2025-45475
maccms10 v2025.1000.4047 is vulnerable to Server-Side request forgery SSRF in Friend Link Management...
maccms10 安全漏洞
maccms10 is magicblack open source a set of PHP + MYSQL environment running under the perfect and powerful rapid website building system. A security vulnerability exists in maccms10 version v2025.1000.4047, which stems from the fact that the friend link management function is vulnerable to...
CVE-2025-45475
maccms10 v2025.1000.4047 is vulnerable to Server-Side request forgery SSRF in Friend Link Management...
PT-2025-23019 · Maccms10 · Maccms10
Name of the Vulnerable Software and Affected Versions: maccms10 version 2025.1000.4047 Description: The issue is related to Server-Side request forgery SSRF in Friend Link Management. This allows an attacker to trick the server into making unintended requests. Recommendations: For version...
CVE-2024-46654
A stored cross-site scripting XSS vulnerability in the Add Scheduled Task module of Maccms10 v2024.1000.4040 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2022-47872
A Server-Side Request Forgery SSRF in maccms10 v2021.1000.2000 allows attackers to force the application to make arbitrary requests via a crafted payload injected into the Name parameter under the Interface address module...
CVE-2022-44870
A reflected cross-site scripting XSS vulnerability in maccms10 v2022.1000.3032 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the AD Management module...
CVE-2022-31303
maccms10 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...