EUVD-2022-52857

Malicious code in bioql PyPI...

CVE-2022-31302

maccms8 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...

CVE-2022-31302

maccms8 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...

CVE-2022-31302

maccms8 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...

Cross site scripting

maccms8 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...

CVE-2022-31302

maccms8 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...

CVE-2022-31302

CVE-2022-31302 concerns the maccms8 content management system, where a stored cross-site scripting (XSS) vulnerability exists in the Server Group text field. Public data confirms the issue as an XSS flaw that can be triggered via a field used to manage server-group metadata; details on affected v...

maccms8 由于涉及缺陷可以再系统内部随意创建文件目录

简要描述： maccms8 由于涉及缺陷可以再系统内部随意创建文件目录（开启文件缓存！！！！！！） 详细说明： 今天在查看苹果cms的时候发现一个任意创建文件目录的代码，本想着可以任意创建文件，但是由于对于文件各方面的过滤，还有一些目录遍历方面的过滤，只能审计到此，啥也不说了，直接看代码 index.php41-42: $tpl-ifex; setPageCache$tpl-P'cp',$tpl-P'cn',$tpl-H; $tpl-run; echo $tpl-H; setPageCache这个函数功能就是把页面内容缓存起来，那么我们进入到缓存的函数里面查看 function...