CVE-2020-21082

CVE-2020-21082 affects Maccms 8.0, specifically the background administrator article management module. The vulnerability is a cross-site scripting (XSS) flaw that enables theft of administrator and user cookies via crafted payloads in the Chinese and English name fields. Exploitation details are...

CVE-2020-21082

A cross-site scripting XSS vulnerability in the background administrator article management module of Maccms 8.0 allows attackers to steal administrator and user cookies via crafted payloads in the text fields for Chinese and English names...

CVE-2020-21081

CVE-2020-21081 is a CSRF vulnerability in Maccms 8.0. The issue arises from insufficient request validation for article add/edit actions, allowing an attacker to manipulate content by luring an administrator to a crafted URL. Affected product: Maccms 8.0 (CMS for film/TV). Root cause: lack of pro...

CVE-2020-21081

A cross-site request forgery CSRF in Maccms 8.0 causes administrators to add and modify articles without their knowledge via clicking on a crafted URL...

Maccms 跨站请求伪造漏洞

Maccms is a PHP-based content management system CMS for film and television. Maccms suffers from a cross-site request forgery vulnerability, which stems from the fact that links to add and edit articles to the product fail to validate that the request came from a trusted user. An attacker could a...

Maccms 跨站脚本漏洞

A security vulnerability exists in Maccms, a PHP-based film and television content management system CMS, due to a failure to validate data in the Chinese and English fields in the product's backend administrator post management module. An attacker can obtain administrator and user cookies throug...

Maccms Cross-Site Scripting Vulnerability (CNVD-2022-30796)

Maccms 10 is a PHP-based film and television content management system CMS. Maccms 10 is vulnerable to a cross-site scripting vulnerability, which originates from the ""wd"" parameter in the software's background search function that is not effectively restricted and checked, and can be exploited...

Maccms arbitrary file upload vulnerability

Maccms is a PHP-based film and television content management system CMS. Maccms 10 is vulnerable to arbitrary file uploads, which can be exploited by attackers to bypass suffix whitelist validation and execute arbitrary code by adding a character after the file name of the uploaded file...

Maccms arbitrary file deletion vulnerability

Maccms is a PHP-based film and television content management system CMS. Maccms has an arbitrary file deletion vulnerability in version 10, which stems from a network system or product that does not properly validate input data and can be exploited by an attacker to delete arbitrary files on the...

Maccms 跨站脚本漏洞

Maccms 10 is a PHP-based film and television content management system CMS. Maccms 10 is vulnerable to a cross-site scripting vulnerability, which originates from the ""wd"" parameter in the software's background search function that is not effectively restricted and checked, and can be exploited...

Maccms 安全漏洞

Maccms is a PHP-based film and television content management system CMS. Maccms has an arbitrary file deletion vulnerability in version 10, which stems from a network system or product that does not properly validate input data and can be exploited by an attacker to delete arbitrary files on the...

Command Execution Vulnerability in MacCMS

MacCMS is a rapid site building system that runs on a PHP MYSQL environment. MacCMS has a command execution vulnerability that can be exploited by attackers to gain control of the server...

MacCMS v10 suffers from a SQL injection vulnerability (CNVD-2021-43044)

maccms is a cms website builder. A SQL injection vulnerability exists in maccms pages, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in MacCMS v10

maccms is a cms website builder. maccms suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

MacCMS has a file upload vulnerability

MacCMS is a cms website builder system. There is a file upload vulnerability in the MacCMS backend that allows attackers to utilize a self-constructed zip file upload trojan...

VulnCheck KEV: CVE-2017-17733

Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request...

Directory Traversal Vulnerability in MacCMS Backend

MacCMS is a cms website builder system. A directory traversal vulnerability exists in the MacCMS backend. It allows an attacker to traverse the directory and obtain sensitive directory and file information...

Code Execution Vulnerability in MacCMS

MacCMS is a cms website builder system. A code execution vulnerability exists in MacCMS. An attacker can exploit the vulnerability to delete arbitrary files and cause system reinstallation. When reinstalling the software, malicious code is constructed to insert into the configuration file to gain...

Maccms Cross-Site Scripting Vulnerability (CNVD-2019-17318)

Maccms is a PHP-based content management system CMS for film and television. A cross-site scripting vulnerability exists in Maccms 8.0 and earlier versions. The vulnerability stems from a lack of proper validation of client-side data in the WEB application. An attacker can exploit this...

CVE-2018-19465

Maccms through 8.0 allows XSS via the sitekeywords field to index.php?m=system-config because of tpl/module/system.php and tpl/html/systemconfig.html, related to template/paody/html/vodindex.html...