CVE-2019-8410 | BDVDB-2026-113155 Detail

Description#

Maccms 8.0 allows XSS via the inc/config/cache.php t_key parameter because template/paody/html/vod_type.html mishandles the keywords parameter, and a/tpl/module/db.php only filters the t_name parameter (not t_key).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/holychang/maccms8/blob/master/xss2

Exploit#

No public exploit known

History#

Version 12019-02-27Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.