54 matches found
CVE-2026-75465
The /api.php/user/getlist endpoint in Maccms v10 v2026.1000.4055 is vulnerable to an Incorrect Access Control issue. The interface fails to perform any authentication or authorization checks. An unauthenticated remote attacker can send a crafted HTTP GET request with limit and offset parameters t...
CVE-2026-75465
The /api.php/user/getlist endpoint in Maccms v10 v2026.1000.4055 is vulnerable to an Incorrect Access Control issue. The interface fails to perform any authentication or authorization checks. An unauthenticated remote attacker can send a crafted HTTP GET request with limit and offset parameters t...
PT-2026-81862
Name of the Vulnerable Software and Affected Versions Maccms version v2026.1000.4055 Description The '/api.php/user/get list' endpoint is subject to Incorrect Access Control, which occurs when an application fails to properly restrict access to sensitive data or functions. The interface does not...
CVE-2026-75465
The /api.php/user/getlist endpoint in Maccms v10 v2026.1000.4055 is vulnerable to an Incorrect Access Control issue. The interface fails to perform any authentication or authorization checks. An unauthenticated remote attacker can send a crafted HTTP GET request with limit and offset parameters t...
CVE-2026-75465
The Maccms v10 v2026.1000.4055 software is vulnerable to an Incorrect Access Control issue in the /api.php/user/get_list endpoint. The interface fails to implement any authentication or authorization checks, allowing an unauthenticated remote attacker to send a crafted HTTP GET request. By manipu...
EUVD-2026-66179
The /api.php/user/getlist endpoint in Maccms v10 v2026.1000.4055 is vulnerable to an Incorrect Access Control issue. The interface fails to perform any authentication or authorization checks. An unauthenticated remote attacker can send a crafted HTTP GET request with limit and offset parameters t...
CVE-2026-75465
The /api.php/user/getlist endpoint in Maccms v10 v2026.1000.4055 is vulnerable to an Incorrect Access Control issue. The interface fails to perform any authentication or authorization checks. An unauthenticated remote attacker can send a crafted HTTP GET request with limit and offset parameters t...
EUVD-2020-13301
Malware in sbrugna...
EUVD-2021-32505
Malicious code in bioql PyPI...
EUVD-2022-32372
Malicious code in bioql PyPI...
EUVD-2021-32504
Malicious code in bioql PyPI...
EUVD-2021-30614
Malicious code in bioql PyPI...
CVE-2021-43707
Cross Site Scripting XSS vulnerability exists in Maccms v10 via linkName parameter...
Cross site scripting
Cross Site Scripting XSS vulnerability exists in Maccms v10 via linkName parameter...
CVE-2021-43707
Cross Site Scripting XSS vulnerability exists in Maccms v10 via linkName parameter...
CVE-2021-43707
The provided connected documents confirm a Cross Site Scripting (XSS) vulnerability in Maccms v10, exploitable via the link_Name parameter. Affected component: Maccms v10 (CMS). Root cause as stated: input handling for link_Name allows script injection, leading to XSS. The CVE entry summarizes im...
CVE-2022-27886
Maccms v10 was discovered to contain a reflected cross-site scripting XSS vulnerability in /admin.php/admin/ulog/index.html via the wd parameter...
CVE-2022-27884
Maccms v10 was discovered to contain a reflected cross-site scripting XSS vulnerability in /admin.php/admin/plog/index.html via the wd parameter...