EUVD-2022-52857

Malicious code in bioql PyPI...

CVE-2022-31302

maccms8 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...

CVE-2022-31302

maccms8 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...

CVE-2022-31302

maccms8 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...

Cross site scripting

maccms8 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...

CVE-2022-31302

maccms8 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...

CVE-2022-31302

maccms8 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...

CVE-2022-31302

CVE-2022-31302 concerns the maccms8 content management system, where a stored cross-site scripting (XSS) vulnerability exists in the Server Group text field. Public data confirms the issue as an XSS flaw that can be triggered via a field used to manage server-group metadata; details on affected v...

CVE-2022-31302: Improper Neutralization of Input During Web Page Generation

maccms8 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...

PT-2022-20678

Name of the Vulnerable Software and Affected Versions maccms8 affected versions not specified Description A stored cross-site scripting XSS issue was found in maccms8 via the Server Group text field. This allows for malicious scripts to be stored and executed when the affected page is viewed...

maccms8 由于涉及缺陷可以再系统内部随意创建文件目录

简要描述： maccms8 由于涉及缺陷可以再系统内部随意创建文件目录（开启文件缓存！！！！！！） 详细说明： 今天在查看苹果cms的时候发现一个任意创建文件目录的代码，本想着可以任意创建文件，但是由于对于文件各方面的过滤，还有一些目录遍历方面的过滤，只能审计到此，啥也不说了，直接看代码 index.php41-42: $tpl-ifex; setPageCache$tpl-P'cp',$tpl-P'cn',$tpl-H; $tpl-run; echo $tpl-H; setPageCache这个函数功能就是把页面内容缓存起来，那么我们进入到缓存的函数里面查看 function...