284 matches found
CVE-2020-21082
A cross-site scripting XSS vulnerability in the background administrator article management module of Maccms 8.0 allows attackers to steal administrator and user cookies via crafted payloads in the text fields for Chinese and English names...
CVE-2020-21081
A cross-site request forgery CSRF in Maccms 8.0 causes administrators to add and modify articles without their knowledge via clicking on a crafted URL...
CVE-2020-21082
A cross-site scripting XSS vulnerability in the background administrator article management module of Maccms 8.0 allows attackers to steal administrator and user cookies via crafted payloads in the text fields for Chinese and English names...
Cross site request forgery (csrf)
A cross-site request forgery CSRF in Maccms 8.0 causes administrators to add and modify articles without their knowledge via clicking on a crafted URL...
Cross site scripting
A cross-site scripting XSS vulnerability in the background administrator article management module of Maccms 8.0 allows attackers to steal administrator and user cookies via crafted payloads in the text fields for Chinese and English names...
CVE-2020-21082
A cross-site scripting XSS vulnerability in the background administrator article management module of Maccms 8.0 allows attackers to steal administrator and user cookies via crafted payloads in the text fields for Chinese and English names...
CVE-2020-21082
CVE-2020-21082 affects Maccms 8.0, specifically the background administrator article management module. The vulnerability is a cross-site scripting (XSS) flaw that enables theft of administrator and user cookies via crafted payloads in the Chinese and English name fields. Exploitation details are...
CVE-2020-21081
CVE-2020-21081 is a CSRF vulnerability in Maccms 8.0. The issue arises from insufficient request validation for article add/edit actions, allowing an attacker to manipulate content by luring an administrator to a crafted URL. Affected product: Maccms 8.0 (CMS for film/TV). Root cause: lack of pro...
CVE-2020-21081
A cross-site request forgery CSRF in Maccms 8.0 causes administrators to add and modify articles without their knowledge via clicking on a crafted URL...
Maccms 跨站脚本漏洞
A security vulnerability exists in Maccms, a PHP-based film and television content management system CMS, due to a failure to validate data in the Chinese and English fields in the product's backend administrator post management module. An attacker can obtain administrator and user cookies throug...
Maccms 跨站请求伪造漏洞
Maccms is a PHP-based content management system CMS for film and television. Maccms suffers from a cross-site request forgery vulnerability, which stems from the fact that links to add and edit articles to the product fail to validate that the request came from a trusted user. An attacker could a...
Maccms Cross-Site Scripting Vulnerability (CNVD-2022-30796)
Maccms 10 is a PHP-based film and television content management system CMS. Maccms 10 is vulnerable to a cross-site scripting vulnerability, which originates from the ""wd"" parameter in the software's background search function that is not effectively restricted and checked, and can be exploited...
Maccms arbitrary file upload vulnerability
Maccms is a PHP-based film and television content management system CMS. Maccms 10 is vulnerable to arbitrary file uploads, which can be exploited by attackers to bypass suffix whitelist validation and execute arbitrary code by adding a character after the file name of the uploaded file...
Maccms arbitrary file deletion vulnerability
Maccms is a PHP-based film and television content management system CMS. Maccms has an arbitrary file deletion vulnerability in version 10, which stems from a network system or product that does not properly validate input data and can be exploited by an attacker to delete arbitrary files on the...
Maccms 安全漏洞
Maccms is a PHP-based film and television content management system CMS. Maccms has an arbitrary file deletion vulnerability in version 10, which stems from a network system or product that does not properly validate input data and can be exploited by an attacker to delete arbitrary files on the...
Maccms 跨站脚本漏洞
Maccms 10 is a PHP-based film and television content management system CMS. Maccms 10 is vulnerable to a cross-site scripting vulnerability, which originates from the ""wd"" parameter in the software's background search function that is not effectively restricted and checked, and can be exploited...
Command Execution Vulnerability in MacCMS
MacCMS is a rapid site building system that runs on a PHP MYSQL environment. MacCMS has a command execution vulnerability that can be exploited by attackers to gain control of the server...
MacCMS v10 suffers from a SQL injection vulnerability (CNVD-2021-43044)
maccms is a cms website builder. A SQL injection vulnerability exists in maccms pages, which can be exploited by attackers to obtain sensitive information from the database...