CVE-2020-21387

A cross-site scripting XSS vulnerability in the parameter typeen of Maccms 10 allows attackers to obtain the administrator cookie and escalate privileges via a crafted payload...

CVE-2020-21387

CVE-2020-21387 is an XSS vulnerability in the parameter type_en of Maccms 10 (a PHP CMS for film/TV). The issue arises from inadequate handling of input in the type_en parameter, enabling an attacker to craft a payload that can steal the administrator cookie and escalate privileges. The linked do...

CVE-2020-21386

CVE-2020-21386 is a CSRF vulnerability in Maccms 10 affecting the component admin.php/admin/type/info.html. The issue arises from its admin flow failing to verify that requests originate from trusted users, enabling an attacker to gain administrator privileges. The connected documents consistentl...

CVE-2020-21386

A Cross-Site Request Forgery CSRF in the component admin.php/admin/type/info.html of Maccms 10 allows attackers to gain administrator privileges...

Maccms 跨站请求伪造漏洞

Maccms is a PHP-based content management system CMS for film and television. A cross-site request forgery vulnerability exists in Macmms 10, which stems from the failure of the admin.php/admin/type/info.html page in the product to verify that requests originate from trusted users. An attacker cou...

Maccms 跨站脚本漏洞

Maccms is a PHP-based content management system CMS for film and television. A cross-site scripting vulnerability exists in Mccms10, which stems from the fact that the nickname in the editing function under the Member module of the product fails to properly validate user input data. An attacker c...

Maccms 跨站脚本漏洞

Maccms is a PHP-based content management system CMS for film and television. A cross-site scripting vulnerability exists in Macmms 10, which stems from a failure to properly handle data for the typeen parameter in the product. An attacker could obtain an administrator cookie and escalate privileg...

Maccms Cross-site Request Forgery Vulnerability (CNVD-2022-13188)

Maccms is a PHP-based film and television content management system CMS. Maccms version 10 has a security vulnerability that can be exploited by an authenticated attacker to delete all users via "admin.php/admin/admin/del/ids/＜id＞.html"...

CVE-2020-20514

A Cross-Site Request Forgery CSRF in Maccms v10 via admin.php/admin/admin/del/ids/.html allows authenticated attackers to delete all users...

CVE-2020-20514

A Cross-Site Request Forgery CSRF in Maccms v10 via admin.php/admin/admin/del/ids/.html allows authenticated attackers to delete all users...

Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF in Maccms v10 via admin.php/admin/admin/del/ids/.html allows authenticated attackers to delete all users...

CVE-2020-20514

A Cross-Site Request Forgery CSRF in Maccms v10 via admin.php/admin/admin/del/ids/.html allows authenticated attackers to delete all users...

CVE-2020-20514

CVE-2020-20514 describes a Cross-Site Request Forgery (CSRF) in Maccms v10. The vulnerability is triggered via the URL path admin.php/admin/admin/del/ids/.html and, when exploited by an authenticated attacker, can cause deletion of all users. Documents consistently reference Maccms v10 and the sa...

Maccms 跨站请求伪造漏洞

Maccms is a PHP-based film and television content management system CMS. Maccms version 10 has a security vulnerability that can be exploited by an authenticated attacker to delete all users via "admin.php/admin/admin/del/ids/＜id＞.html"...

Maccms Cross-site Request Forgery Vulnerability

Maccms is a PHP-based content management system CMS for film and television. Maccms suffers from a cross-site request forgery vulnerability, which stems from the fact that links to add and edit articles to the product fail to validate that the request came from a trusted user. An attacker could a...

Maccms Cross-Site Scripting Vulnerability (CNVD-2021-74101)

A security vulnerability exists in Maccms, a PHP-based film and television content management system CMS, due to a failure to validate data in the Chinese and English fields in the product's backend administrator post management module. An attacker can obtain administrator and user cookies throug...

CVE-2020-21082

A cross-site scripting XSS vulnerability in the background administrator article management module of Maccms 8.0 allows attackers to steal administrator and user cookies via crafted payloads in the text fields for Chinese and English names...

CVE-2020-21081

A cross-site request forgery CSRF in Maccms 8.0 causes administrators to add and modify articles without their knowledge via clicking on a crafted URL...

CVE-2020-21081

A cross-site request forgery CSRF in Maccms 8.0 causes administrators to add and modify articles without their knowledge via clicking on a crafted URL...

CVE-2020-21082

A cross-site scripting XSS vulnerability in the background administrator article management module of Maccms 8.0 allows attackers to steal administrator and user cookies via crafted payloads in the text fields for Chinese and English names...