CVE-2023-26782

An issue discovered in mccms 2.6.1 allows remote attackers to cause a denial of service via Backend management interface -System Configuration-Cache Configuration-Cache security characters...

mccms SQL注入漏洞

mccms Man City CMS is a rapid website building system for individual developers of China Smokey River South chshcms. A security vulnerability exists in version 2.6 of mccms, which stems from the presence of a SQL injection vulnerability that allows remote attackers to run arbitrary SQL commands...

CVE-2023-26782

CVE-2023-26782 applies to mccms 2.6.1. The issue is a DoS vulnerability in the Backend management interface, specifically under System Configuration → Cache Configuration → Cache security characters. The available documents identify the affected software and the vulnerable path but do not provide...

CVE-2023-29815

The CVE-2023-29815 entry affects mccms v2.6.3 and is a Cross Site Request Forgery (CSRF) vulnerability. The available sources confirm the vulnerable component (mccms v2.6.3) and classify the impact as high (CVSS: 8.8, NETWORK attack vector, user interaction required). Connected documents do not p...

PT-2023-20797 · Mccms · Mccms

Name of the Vulnerable Software and Affected Versions: mccms version 2.6.1 Description: An issue in the Backend management interface, specifically in System Configuration-Cache Configuration-Cache security characters, allows remote attackers to cause a denial of service. Recommendations: For mccm...

PT-2023-22429 · Mccms · Mccms

Name of the Vulnerable Software and Affected Versions: mccms version 2.6.3 Description: The issue is related to Cross Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. No information is provided about the estimated...

CVE-2023-26781

CVE-2023-26781 affects mccms 2.6. The vulnerability is a SQL injection in the Author Center → Reader Comments → Search function, enabling remote attackers to execute arbitrary SQL via user input. The entry consistently lists a critical impact with CVSS v3.1 base score 9.8 (AV:N/AC:L/PR:N/UI:N/S:U...

mccms 代码注入漏洞

mccms diffuse city CMS is China smoke and rain Jiangnan chshcms individual developers of a rapid site-building system. A code injection vulnerability exists in mccms version 2.6.1. A remote attacker could exploit this vulnerability to cause a denial of service...

CVE-2023-26781

SQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL commands via Author Center -Reader Comments -Search...

CVE-2023-26782

An issue discovered in mccms 2.6.1 allows remote attackers to cause a denial of service via Backend management interface -System Configuration-Cache Configuration-Cache security characters...

mccms 跨站请求伪造漏洞

mccms diffuse city CMS is a rapid website building system for individual developers of China Smokey River South chshcms. A security vulnerability exists in mccms version v2.6.3. An attacker exploited the vulnerability to perform cross-site request forgery CSRF attacks...

CVE-2023-29815

mccms v2.6.3 is vulnerable to Cross Site Request Forgery CSRF...

PT-2023-20796 · Mccms · Mccms

Name of the Vulnerable Software and Affected Versions: mccms version 2.6 Description: The issue allows remote attackers to run arbitrary SQL commands via the Author Center -Reader Comments -Search function. This can be exploited by accessing the Author Center and then navigating to Reader Comment...

CVE-2023-29815

mccms v2.6.3 is vulnerable to Cross Site Request Forgery CSRF...

CVE-2023-26781

SQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL commands via Author Center -Reader Comments -Search...

Mccms has a file upload vulnerability

Mccms is a comic + novel system developed using the Ci framework as its core. Mccms has a file upload vulnerability that can be exploited by attackers to gain control of the server...

Arbitrary File Download Vulnerability in Mccms

Mccms is a comic + novel system developed using the Ci framework as its core. Mccms has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

Mccms has a flawed logic vulnerability

Mccms is a comic + novel system developed using the Ci framework as its core. Mccms has a logic flaw vulnerability that can be exploited by attackers to modify the payment amount...

MediaCluster (mcCMS) Shell Upload

========================================================================= MediaCluster mcCMS Arbitrary File Upload Vulnerability ========================================================================== +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= +=+=+= +=+=+=...