CVE-2022-47002

A vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authentication via a crafted web request...

Masa CMS < 7.2.1 Path Traversal

Masa CMS versions prior to 7.2.1 is affected by a path traversal vulnerability in /index.cfm/api/asset/image/. No source data...

Masa CMS Default Credentials

The scanner successfully authenticated on the Masa CMS web application by using predictable credentials on its login form. No source data...

Masa CMS < 7.2.5 / 7.3.x < 7.3.10 Authentication Bypass

Masa CMS versions prior to 7.2.5 and 7.3.x 7.3.10 suffers from an authentication bypass vulnerability via a specially forged request. No source data...

Mura/Masa CMS SQL Injection

Mura and Masa CMS Open-source fork suffer from a SQL injection vulnerability on the JSON API. By crafting a specific HTTP request, a remote and unauthenticated attacker can exploit the vulnerability to gain access to the database and perform arbitrary operations. No source data...

The vulnerability of the Mura/Masa CMS system, related to the lack of measures taken to protect the SQL query structure, allows attackers to access the protected information.

The vulnerability of the Mura/Masa CMS system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the protected information...

Exploit for CVE-2024-32640

And exploited SQL injection vulnerabilities in Mura/Masa C...

Exploit for CVE-2024-32640

Muraider - Automating the detection & Exploitation of CVE-2024...

VulnCheck KEV: CVE-2024-32640

Mura/Masa CMS is vulnerable to a SQL injection vulnerability...

PT-2024-4567

Name of the Vulnerable Software and Affected Versions: MASA CMS versions prior to 7.4.6 MASA CMS versions prior to 7.3.13 MASA CMS versions prior to 7.2.8 Description: MASA CMS, an Enterprise Content Management platform, contains a SQL injection vulnerability in the processAsyncObject method...

CVE-2022-47002

A vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authentication via a crafted web request...

Authentication flaw

A vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authentication via a crafted web request...

CVE-2022-47002

A vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authentication via a crafted web request...

CVE-2022-47002

Masa CMS versions 7.2, 7.3, and 7.4-beta are vulnerable to an authentication bypass in the Remember Me function. A crafted web request can bypass login, potentially exposing sensitive data and allowing unauthorized administrative actions. The issue is labeled CRITICAL (CVSS v3.1: AV:N/AC:L/PR:N/U...

CVE-2022-47002

A vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authentication via a crafted web request...

Masa CMS 安全漏洞

Masa CMS is a digital experience platform. A security vulnerability exists in Masa CMS v7.2, 7.3, and 7.4-beta that stems from its Remember Me feature that allows attackers to bypass authentication via a crafted web request...

CVE-2021-42183

MasaCMS 7.2.1 is affected by a path traversal vulnerability in /index.cfm/api/asset/image/...

Masa CMS 路径遍历漏洞

Masa CMS is a digital experience platform from MasaCMS. A security vulnerability exists in Masa CMS version 7.2.1, which stems from a path traversal vulnerability due to a lack of escaping for path parameters in /index.cfm/api/asset/image/...