CVE-2023-26782

Published: Apr 28, 2023Modified: Jan 31, 2025

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

An issue discovered in mccms 2.6.1 allows remote attackers to cause a denial of service via Backend management interface ->System Configuration->Cache Configuration->Cache security characters.

Affected (1)

Products: Chshcms: Mccms

Chshcms

1 product

Mccms

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Chshcms Mccms	Version 2.6.1

Related CWEs

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (2)

https://github.com/chshcms/mccms/issues/2

Source: cve@mitre.org

ExploitIssue Tracking

https://github.com/chshcms/mccms/issues/2

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue Tracking

Timeline

No history available yet.