TI-2025-32418 CVE-2025-51818 · GHSA-ggqw-h359-hvrr
MCCMS 2.7.0 is vulnerable to Arbitrary file deletion in the Backups.php component.
Priority MEDIUM 60
MCCMS 2.7.0 is vulnerable to Arbitrary file deletion in the Backups.php component.
Vulnerabilities
11 records
TI-2025-32090 CVE-2025-50234 · GHSA-q8fh-wr43-3mgc
MCCMS v2.7.0 has an SSRF vulnerability located in the index() method of the…
Priority MEDIUM 62
MCCMS v2.7.0 has an SSRF vulnerability located in the index() method of the sys\apps\controllers\api\Gf.php file, where the pic parameter is processed.
TI-2025-32383 CVE-2025-51651 · GHSA-5xj4-3cf7-r6mm
An authenticated arbitrary file download vulnerability in the component…
Priority MEDIUM 58
An authenticated arbitrary file download vulnerability in the component /admin/Backups.php of Mccms v2.7.0 allows attackers to download arbitrary files via a crafted GET request.
TI-2025-04783 CVE-2025-5328 · GHSA-46f9-q7p3-mph9
chshcms mccms Backups.php restore_del path traversal
Priority MEDIUM 57
A vulnerability was found in chshcms mccms 2.7.
TI-2025-04782 CVE-2025-5327 · GHSA-wjh7-pgpr-92w5
chshcms mccms Gf.php index server-side request forgery
Priority MEDIUM 57
A vulnerability was found in chshcms mccms 2.7.
TI-2023-04631 CVE-2023-5029 · GHSA-vgx5-mfp7-c7qj
mccms 1 sql injection
Priority LOW 39
A vulnerability, which was classified as critical, was found in mccms 2.6.
TI-2023-03032 CVE-2023-3236 · GHSA-crh3-rr47-6rc3
mccms Comic.php pic_save server-side request forgery
Priority LOW 39
A vulnerability classified as critical has been found in mccms up to 2.6.5.
TI-2023-03031 CVE-2023-3235 · GHSA-p76q-8wfr-hpf8
mccms Comic.php pic_api server-side request forgery
Priority LOW 39
A vulnerability was found in mccms up to 2.6.5.
TI-2023-14030 CVE-2023-29815 · GHSA-3w85-93xm-x7vx
mccms v2.6.3 is vulnerable to Cross Site Request Forgery (CSRF).
Priority HIGH 73
mccms v2.6.3 is vulnerable to Cross Site Request Forgery (CSRF).
TI-2023-11774 CVE-2023-26782 · GHSA-q5wj-v48m-ch2m
An issue discovered in mccms 2.6.1 allows remote attackers to cause a denial of service…
Priority MEDIUM 62
An issue discovered in mccms 2.6.1 allows remote attackers to cause a denial of service via Backend management interface ->System Configuration->Cache Configuration->Cache security characters.
TI-2023-11773 CVE-2023-26781 · GHSA-3whv-7544-3cv4
SQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL…
Priority HIGH 82
SQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL commands via Author Center ->Reader Comments ->Search.