CVE-2020-23047

CVE-2020-23047 corresponds to a cross-site scripting (XSS) vulnerability in the Macrob7 Macs Framework Content Management System (CMS) version 1.14f, specifically in the search input field of the search module. Multiple connected sources confirm the issue and identify the affected product and ver...

CVE-2020-36498

Macrob7 Macs Framework Content Management System - 1.14f contains a cross-site scripting XSS vulnerability in the account reset function, which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the e-mail input field...

CVE-2020-36498

The CVE-2020-36498 entry concerns Macrob7 Macs Framework Content Management System (CMS) v1.14f. A cross-site scripting (XSS) vulnerability exists in the account reset function, allowing an attacker to execute arbitrary web scripts or HTML via a crafted payload in the email input field. The issue...

Macrob7 Macs Framework Content Management System 跨站脚本漏洞

Zenar Content Management System is an open source content management system CMS from the Zenar team. A cross-site scripting vulnerability exists in Macrob7 Macs Framework Content Management System version 1.14, which can be exploited by an attacker via the search input field of the search module...

Macrob7 Macs Framework Cms SQL注入漏洞

Macrob7 Macs Framework Cms is an open source Cms framework from the personal developer Macdonald Terrence Robinson. version 1.14 of the Macrob7 Macs Framework Content Management System is vulnerable to SQL injection, which allows attackers to SQL injection can be performed via the "roleId"...

PT-2021-10823

Name of the Vulnerable Software and Affected Versions Macrob7 Macs Framework Content Management System version 1.14f Description The issue is related to a cross-site scripting XSS vulnerability found in the search input field of the search module. This allows for potential malicious script...

PT-2021-10821

Name of the Vulnerable Software and Affected Versions Macrob7 Macs Framework Content Management System version 1.14f Description A SQL injection issue was found in the Macrob7 Macs Framework Content Management System. The issue is related to the roleId parameter in the editRole and deletUser...

PT-2021-12067

Name of the Vulnerable Software and Affected Versions: Macrob7 Macs Framework Content Management System version 1.14f Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the e-mail input field, specifically in the account reset function. This...

CVE-2020-23045: Improper Neutralization of Special Elements used in an SQL Command

Macrob7 Macs Framework Content Management System - 1.14f was discovered to contain a SQL injection vulnerability via the 'roleId' parameter of the editRole and deletUser modules...

CVE-2020-23047: Improper Neutralization of Input During Web Page Generation

Macrob7 Macs Framework Content Management System - 1.14f was discovered to contain a cross-site scripting XSS vulnerability in the search input field of the search module...

CVE-2020-36498: Improper Neutralization of Input During Web Page Generation

Macrob7 Macs Framework Content Management System - 1.14f contains a cross-site scripting XSS vulnerability in the account reset function, which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the e-mail input field...