CVE-2023-43154 | BDVDB-2026-212628 Detail

Description#

In Macrob7 Macs Framework Content Management System (CMS) 1.1.4f, loose comparison in "isValidLogin()" function during login attempt results in PHP type confusion vulnerability that leads to authentication bypass and takeover of the administrator account.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/ally-petitt/macs-cms-auth-bypass
https://cxsecurity.com/issue/WLB-2023090075

Exploit#

No public exploit known

History#

Version 12023-09-26Record published in the CVE List.
Version 22024-09-24Most recent update recorded in the CVE List.