MacCMS suffers from xml entity injection vulnerability

MacCMS program is a fast shadow video building system that runs on PHP+MYSQL environment. MacCMS suffers from an xml entity injection vulnerability due to the system failing to disable XML entity parsing. An attacker can construct malicious requests to execute system commands on the target host t...