281 matches found
CVE-2022-47872
A Server-Side Request Forgery SSRF in maccms10 v2021.1000.2000 allows attackers to force the application to make arbitrary requests via a crafted payload injected into the Name parameter under the Interface address module...
CVE-2022-35148
maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection vulnerability via the table parameter at database/columns.html...
CVE-2022-31302
maccms8 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...
Maccms 跨站脚本漏洞
Maccms is a PHP-based content management system CMS for film and television. A cross-site scripting vulnerability exists in Maccms 8, which stems from an issue containing cross-site scripting XSS stored via server group text fields...
Maccms 跨站脚本漏洞
Maccms is a PHP-based content management system CMS for film and television. A security vulnerability exists in Maccms 10, which stems from an issue containing cross-site scripting XSS stored via server group text fields...
Maccms Cross-Site Scripting Vulnerability (CNVD-2022-30789)
MacCMS is a fast video content management open source cms system. maccms has a cross-site scripting vulnerability, no details of the vulnerability are currently available...
CVE-2021-43707
Cross Site Scripting XSS vulnerability exists in Maccms v10 via linkName parameter...
CVE-2021-43707
Cross Site Scripting XSS vulnerability exists in Maccms v10 via linkName parameter...
Cross site scripting
Cross Site Scripting XSS vulnerability exists in Maccms v10 via linkName parameter...
CVE-2021-43707
Cross Site Scripting XSS vulnerability exists in Maccms v10 via linkName parameter...
CVE-2021-43707
The provided connected documents confirm a Cross Site Scripting (XSS) vulnerability in Maccms v10, exploitable via the link_Name parameter. Affected component: Maccms v10 (CMS). Root cause as stated: input handling for link_Name allows script injection, leading to XSS. The CVE entry summarizes im...
Maccms 跨站脚本漏洞
MacCMS is a fast video content management open source cms system. maccms has a cross-site scripting vulnerability, no details of the vulnerability are currently available...
Maccms Cross-Site Scripting Vulnerability (CNVD-2022-30792)
Maccms is a PHP-based film and television content management system CMS. maccms v10 version of the cross-site scripting vulnerability, the vulnerability stems from the wd parameter in /admin.php/admin/ulog/index.html lack of user-supplied data and output data validation filter, an attacker can us...
Maccms Cross-Site Scripting Vulnerability (CNVD-2022-30791)
Maccms is a PHP-based film and television content management system CMS. v10 version of Maccms is vulnerable to a cross-site scripting vulnerability, which originates from the lack of a repeat parameter in /admin.php/admin/vod/data.html to check the data provided by the user and the output data...
Maccms Cross-Site Scripting Vulnerability (CNVD-2022-30793)
Maccms is a PHP-based content management system CMS for film and television. v10 version of Maccms contains a cross-site scripting vulnerability, which originates from the lack of user-supplied data and output data validation filtering in the wd parameter in /admin.php/admin/plog/index.html, whic...
Maccms Cross-Site Scripting Vulnerability (CNVD-2022-30790)
Maccms is a PHP-based film and television content management system CMS. v10 version of Maccms is vulnerable to a cross-site scripting vulnerability, which originates from the lack of user-supplied data and output data validation filtering in the select and input parameters in...
Maccms Cross-Site Scripting Vulnerability (CNVD-2022-30794)
Maccms is a PHP-based film and television content management system CMS. v10 version of Maccms contains a cross-site scripting vulnerability, which originates from the lack of user-supplied data and output data validation filtering in the select and input parameters in...
CVE-2022-27884
Maccms v10 was discovered to contain a reflected cross-site scripting XSS vulnerability in /admin.php/admin/plog/index.html via the wd parameter...