EUVD-2019-17800

Malware in sbrugna...

MacCMS Cross-Site Scripting Vulnerability

Maccms is a PHP-based content management system CMS for film and television. A cross-site scripting vulnerability exists in the inc/config/cache.php file in Maccms version 8.0, which stems from the incorrect handling of the 'keywords' parameter in the template/paody/html/vodtype.html file and the...

CVE-2019-8410

Maccms 8.0 allows XSS via the inc/config/cache.php tkey parameter because template/paody/html/vodtype.html mishandles the keywords parameter, and a/tpl/module/db.php only filters the tname parameter not tkey...

CVE-2019-8410

CVE-2019-8410 affects Maccms 8.0, where an XSS exists due to improper handling of the t_key parameter in inc/config/cache.php and the related template logic in template/paody/html/vod_type.html, with a/tpl/module/db.php only filtering t_name. The vulnerability enables an attacker to store a scrip...

CVE-2019-8410

Maccms 8.0 allows XSS via the inc/config/cache.php tkey parameter because template/paody/html/vodtype.html mishandles the keywords parameter, and a/tpl/module/db.php only filters the tname parameter not tkey...