229 matches found
CVE-2022-26573
CVE-2022-26573 affects Maccms v10, with multiple reflected XSS vulnerabilities in /admin.php/admin/art/data.html via the select and input parameters. Root cause: lack of input data validation and output filtering in that endpoint. Impact: potential injection of JavaScript in pages shown to users ...
CVE-2022-26573
Maccms v10 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities in /admin.php/admin/art/data.html via the select and input parameters...
Maccms 跨站脚本漏洞
Maccms is a PHP-based film and television content management system CMS. maccms v10 version of the cross-site scripting vulnerability, the vulnerability stems from the wd parameter in /admin.php/admin/ulog/index.html lack of user-supplied data and output data validation filter, an attacker can us...
CVE-2022-25431
Tenda AC9 v15.03.2.21 was discovered to contain multiple stack overflows via the NPTR, V12, V10 and V11 parameter in the Formsetqosband function...
Stack overflow
Tenda AC9 v15.03.2.21 was discovered to contain multiple stack overflows via the NPTR, V12, V10 and V11 parameter in the Formsetqosband function...
CVE-2021-45787
There is a stored Cross Site Scripting XSS vulnerability in maccms v10 through adding videos. XSS code can be inserted at parameter positions including name and remarks...
CVE-2021-45786
In maccms v10, an attacker can log in through /index.php/user/login in the "col" and "openid" parameters to gain privileges...
Cross site scripting
There is a stored Cross Site Scripting XSS vulnerability in maccms v10 through adding videos. XSS code can be inserted at parameter positions including name and remarks...
Code injection
In maccms v10, an attacker can log in through /index.php/user/login in the "col" and "openid" parameters to gain privileges...
CVE-2021-45787
CVE-2021-45787 affects Maccms v10, with a stored XSS vulnerability when adding videos. XSS payloads can be injected via input fields such as name and remarks due to inadequate data validation/output filtering, as confirmed by multiple sources (NVD/CNVD/CNNVD). The connected documents do not provi...
CVE-2021-45787
There is a stored Cross Site Scripting XSS vulnerability in maccms v10 through adding videos. XSS code can be inserted at parameter positions including name and remarks...
CVE-2021-45786
CVE-2021-45786 affects the Maccms v10 system. The provided documents describe a privilege escalation where an attacker can log in via /index.php/user/login using the parameters col and openid to obtain privileges. This is consistently reported across NVD/CNVD/other records in the supplied sources...
CVE-2021-45786
In maccms v10, an attacker can log in through /index.php/user/login in the "col" and "openid" parameters to gain privileges...
CVE-2020-20514
A Cross-Site Request Forgery CSRF in Maccms v10 via admin.php/admin/admin/del/ids/.html allows authenticated attackers to delete all users...
Cross site request forgery (csrf)
A Cross-Site Request Forgery CSRF in Maccms v10 via admin.php/admin/admin/del/ids/.html allows authenticated attackers to delete all users...
CVE-2020-20514
A Cross-Site Request Forgery CSRF in Maccms v10 via admin.php/admin/admin/del/ids/.html allows authenticated attackers to delete all users...
CVE-2020-20514
CVE-2020-20514 describes a Cross-Site Request Forgery (CSRF) in Maccms v10. The vulnerability is triggered via the URL path admin.php/admin/admin/del/ids/.html and, when exploited by an authenticated attacker, can cause deletion of all users. Documents consistently reference Maccms v10 and the sa...
Security Bulletin: IBM DataPower Gateway vulnerable to a DoS
Summary IBM has addressed the following vulnerability within the Gateway Director component. Note that the vulnerability existed in only the immediately preceding version in all releases. Vulnerability Details CVEID: CVE-2020-8251 DESCRIPTION: Node.js is vulnerable to a denial of service, caused ...
MacCMS v10 suffers from a SQL injection vulnerability (CNVD-2021-43044)
maccms is a cms website builder. A SQL injection vulnerability exists in maccms pages, which can be exploited by attackers to obtain sensitive information from the database...