Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2021-45786

Description

In maccms v10, an attacker can log in through /index.php/user/login in the "col" and "openid" parameters to gain privileges.

- https://github.com/magicblack/maccms10/issues/747

- https://github.com/ndouglas-cloudsmith/exploit-check