Show filters
27 Total Results
Displaying 21-27 of 27
Sort by:
Attacker Value
Unknown
CVE-2020-21363
Disclosure Date: August 11, 2021 (last updated February 23, 2025)
An arbitrary file deletion vulnerability exists within Maccms10.
0
Attacker Value
Unknown
CVE-2020-21362
Disclosure Date: August 11, 2021 (last updated February 23, 2025)
A cross site scripting (XSS) vulnerability in the background search function of Maccms10 allows attackers to execute arbitrary web scripts or HTML via the 'wd' parameter.
0
Attacker Value
Unknown
CVE-2020-21359
Disclosure Date: August 11, 2021 (last updated February 23, 2025)
An arbitrary file upload vulnerability in the Template Upload function of Maccms10 allows attackers bypass the suffix whitelist verification to execute arbitrary code via adding a character to the end of the uploaded file's name.
0
Attacker Value
Unknown
CVE-2019-9829
Disclosure Date: March 15, 2019 (last updated November 27, 2024)
Maccms 10 allows remote attackers to execute arbitrary PHP code by entering this code in a template/default_pc/html/art Edit action. This occurs because template rendering uses an include operation on a cache file, which bypasses the prohibition of .php files as templates.
0
Attacker Value
Unknown
CVE-2019-8410
Disclosure Date: February 27, 2019 (last updated November 27, 2024)
Maccms 8.0 allows XSS via the inc/config/cache.php t_key parameter because template/paody/html/vod_type.html mishandles the keywords parameter, and a/tpl/module/db.php only filters the t_name parameter (not t_key).
0
Attacker Value
Unknown
CVE-2018-12114
Disclosure Date: June 14, 2018 (last updated November 26, 2024)
Maccms 10 allows CSRF via admin.php/admin/admin/info.html to add user accounts.
0
Attacker Value
Unknown
CVE-2017-17733
Disclosure Date: December 18, 2017 (last updated November 26, 2024)
Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request.
0
