7 matches found
CVE-2023-45503
CVE-2023-45503 脆弱性の詳細 概要 Macrob7 Macs Framework Content Management System（CMS）バージョン1.1.4f以前では、ユーザー入力の安全でない処理により、16件のSQLインジェクション脆弱性が発生します。任意のSQLクエリを実行できることで、ユーザーのパスワードハッシュを含むプライベートデータが漏えいしたり、他のユーザーの認証情報や権限レベルを変更されたりする可能性があります。影響には、権限昇格や潜在的なリモートコード実行（RCE）が含まれます。...
CVE-2023-45503
SQL Injection vulnerability in Macrob7 Macs CMS 1.1.4f, allows remote attackers to execute arbitrary code, cause a denial of service DoS, escalate privileges, and obtain sensitive information via crafted payload to resetPassword, forgotPasswordProcess, saveUser, saveRole, deleteUser, deleteRole,...
CVE-2023-45503
SQL Injection vulnerability in Macrob7 Macs CMS 1.1.4f, allows remote attackers to execute arbitrary code, cause a denial of service DoS, escalate privileges, and obtain sensitive information via crafted payload to resetPassword, forgotPasswordProcess, saveUser, saveRole, deleteUser, deleteRole,...
CVE-2023-45503
Macrob7 Macs CMS (Macs CMS) 1.1.4f and earlier contains SQL injection vulnerabilities due to improper input handling in several endpoints (e.g., resetPassword, forgotPasswordProcess, saveUser, saveRole, deleteUser, deleteRole, deleteComment, allowComment, addComment). Root cause is lack of input ...
CVE-2023-45503
SQL Injection vulnerability in Macrob7 Macs CMS 1.1.4f, allows remote attackers to execute arbitrary code, cause a denial of service DoS, escalate privileges, and obtain sensitive information via crafted payload to resetPassword, forgotPasswordProcess, saveUser, saveRole, deleteUser, deleteRole,...
