Maccmspro Maccms10 input validation error vulnerability

The MaccmsPro Maccms10 contains an input validation error vulnerability. This vulnerability stems from a batch assignment issue in index/Comment::saveData. Unauthenticated attackers can submit anonymous comments by using a specially crafted userid parameter, setting arbitrary values for the...