Maccmspro Maccms10 authorization issue vulnerability

Maccmspro versions 2021.1000.2000 and earlier, as well as versions prior to 2026.1000.4054, contain an authorization issue vulnerability. This vulnerability arises because checkmsg fails to compare msgto, allowing authentication bypass. Unauthenticated attackers can send a user/findpassmsg reques...

Maccmspro Maccms10 race condition vulnerability

The MaccmsPro Maccms10 version contains a race condition vulnerability. This vulnerability stems from a race condition in Card::useData. Authenticated members can repeat the process of redeeming the same recharge card via the user/buy endpoint. By sending a large number of concurrent requests wit...

Maccmspro Maccms10 input validation error vulnerability

The MaccmsPro Maccms10 contains an input validation error vulnerability. This vulnerability stems from a batch assignment issue in index/Comment::saveData. Unauthenticated attackers can submit anonymous comments by using a specially crafted userid parameter, setting arbitrary values for the...