CVE-2023-43154-PoC

CVE-2023-43154 - Macs Framework v1.1.4f CMS 类型混淆漏洞 目录 1. 概述 2. 概念验证 3. 技术简报 4. 缓解措施 概述 CVE-ID : CVE-2023-43154 CVSS 3.1 : 9.8 漏洞描述 : isValidLogin 函数中的松散比较导致 PHP 类型混淆漏洞，可被利用来绕过身份验证并接管管理员账户。 受影响参数 : CMS 上用户的用户名和密码。 受影响产品 : Macs Framework v1.14f - 内容管理系统 限制条件 : 1. 受害者账户的用户名必须事先已知或是一个类似零的字符串 2...

CVE-2023-43154: Access of Resource Using Incompatible Type

In Macrob7 Macs Framework Content Management System CMS 1.1.4f, loose comparison in "isValidLogin" function during login attempt results in PHP type confusion vulnerability that leads to authentication bypass and takeover of the administrator account...

CVE-2023-43154

In Macrob7 Macs Framework Content Management System CMS 1.1.4f, loose comparison in "isValidLogin" function during login attempt results in PHP type confusion vulnerability that leads to authentication bypass and takeover of the administrator account...

Macrob7 Macs Framework Cms Security Vulnerability

Macrob7 Macs Framework Cms is an open source Cms framework by the individual developer Macdonald Terrence Robinson. A security vulnerability exists in Macrob7 Macs Framework Cms v1.1.4f CMS, which stems from a type confusion vulnerability in the isValidLogin function. The vulnerability can be...