PT-2023-20797 · Mccms · Mccms

Name of the Vulnerable Software and Affected Versions: mccms version 2.6.1 Description: An issue in the Backend management interface, specifically in System Configuration-Cache Configuration-Cache security characters, allows remote attackers to cause a denial of service. Recommendations: For mccm...

CVE-2023-29815

mccms v2.6.3 is vulnerable to Cross Site Request Forgery CSRF...

PT-2023-20796 · Mccms · Mccms

Name of the Vulnerable Software and Affected Versions: mccms version 2.6 Description: The issue allows remote attackers to run arbitrary SQL commands via the Author Center -Reader Comments -Search function. This can be exploited by accessing the Author Center and then navigating to Reader Comment...

CVE-2023-26782

An issue discovered in mccms 2.6.1 allows remote attackers to cause a denial of service via Backend management interface -System Configuration-Cache Configuration-Cache security characters...

CVE-2023-26781

CVE-2023-26781 affects mccms 2.6. The vulnerability is a SQL injection in the Author Center → Reader Comments → Search function, enabling remote attackers to execute arbitrary SQL via user input. The entry consistently lists a critical impact with CVSS v3.1 base score 9.8 (AV:N/AC:L/PR:N/UI:N/S:U...

CVE-2023-29815

The CVE-2023-29815 entry affects mccms v2.6.3 and is a Cross Site Request Forgery (CSRF) vulnerability. The available sources confirm the vulnerable component (mccms v2.6.3) and classify the impact as high (CVSS: 8.8, NETWORK attack vector, user interaction required). Connected documents do not p...

mccms 代码注入漏洞

mccms diffuse city CMS is China smoke and rain Jiangnan chshcms individual developers of a rapid site-building system. A code injection vulnerability exists in mccms version 2.6.1. A remote attacker could exploit this vulnerability to cause a denial of service...

mccms SQL注入漏洞

mccms Man City CMS is a rapid website building system for individual developers of China Smokey River South chshcms. A security vulnerability exists in version 2.6 of mccms, which stems from the presence of a SQL injection vulnerability that allows remote attackers to run arbitrary SQL commands...

CVE-2023-26782

CVE-2023-26782 applies to mccms 2.6.1. The issue is a DoS vulnerability in the Backend management interface, specifically under System Configuration → Cache Configuration → Cache security characters. The available documents identify the affected software and the vulnerable path but do not provide...

CVE-2023-26781

SQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL commands via Author Center -Reader Comments -Search...

PT-2023-22429 · Mccms · Mccms

Name of the Vulnerable Software and Affected Versions: mccms version 2.6.3 Description: The issue is related to Cross Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. No information is provided about the estimated...

CVE-2023-26781

SQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL commands via Author Center -Reader Comments -Search...

CVE-2023-29815

mccms v2.6.3 is vulnerable to Cross Site Request Forgery CSRF...

mccms 跨站请求伪造漏洞

mccms diffuse city CMS is a rapid website building system for individual developers of China Smokey River South chshcms. A security vulnerability exists in mccms version v2.6.3. An attacker exploited the vulnerability to perform cross-site request forgery CSRF attacks...

CVE-2023-26782

An issue discovered in mccms 2.6.1 allows remote attackers to cause a denial of service via Backend management interface -System Configuration-Cache Configuration-Cache security characters...

Mccms has a file upload vulnerability

Mccms is a comic + novel system developed using the Ci framework as its core. Mccms has a file upload vulnerability that can be exploited by attackers to gain control of the server...

Mccms has a flawed logic vulnerability

Mccms is a comic + novel system developed using the Ci framework as its core. Mccms has a logic flaw vulnerability that can be exploited by attackers to modify the payment amount...

Arbitrary File Download Vulnerability in Mccms

Mccms is a comic + novel system developed using the Ci framework as its core. Mccms has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

MediaCluster (mcCMS) Shell Upload

========================================================================= MediaCluster mcCMS Arbitrary File Upload Vulnerability ========================================================================== +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= +=+=+= +=+=+=...